EUVD-2025-179953

Malicious code in build-hapi-registry-quark npm...

EUVD-2025-177948

Malicious code in markdown-pdf-mdx-build-config npm...

EUVD-2025-180258

Malicious code in async-registry-build-xml npm...

EUVD-2025-178492

Malicious code in husky-build-toml-troposphere npm...

Malicious code in terser-isostasy-build-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4033657f71986b123682d6e7e4343c3f93c872e361a0aab7fce5e54e109361a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-hapi-registry-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6d83f597fe639d7acbcf9e97540b25f2a624333b18013c7061e016e06fa331d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188761 Malicious code in polaris-build-event-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5870c41fb0c9b2494b76d327532e4ff9b679ae512b5700ee30c24b2d374aed9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187382 Malicious code in hugo-build-configstore-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9153c124f5d5e6316c12ad12d229ee3d86fb12c8b46821aa50e1b4c2d6c78a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in build-terser-chariklo-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed23b79eed8301d5dd64081b506129fa0dd8086dedc7df9b4ba9d963e3bae94b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113220

Malicious code in gemini-build-regulus-airbnb npm...

EUVD-2025-112229

Malicious code in javascript-nodejs-lint-staged-build npm...

EUVD-2025-121739

Malicious code in spinner-build-castor-hermes npm...

EUVD-2025-114817

Malicious code in csrf-oauth-zenobia-build npm...

EUVD-2025-121512

Malicious code in sync-build-koa-miranda npm...

EUVD-2025-123902

Malicious code in pegasus-callback-build-sequelize npm...

Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120567

Malicious code in webdriver-mocha-sadr-halley-build npm...

EUVD-2025-116521

Malicious code in ariel-build-octans-cors npm...

Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...