EUVD-2025-115916

Malicious code in build-publish-centaurus-antares npm...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

EUVD-2025-123549

Malicious code in polaris-stop-build-async npm...

EUVD-2025-121929

Malicious code in slides-slides-build-yonder npm...

EUVD-2025-112840

Malicious code in hercules-betelgeuse-build-release-it npm...

EUVD-2025-115912

Malicious code in build-socketio-enif-mutation npm...

EUVD-2025-114768

Malicious code in csv-build-rigel-superagent npm...

EUVD-2025-113424

Malicious code in framework-nuxtjs-sedna-build npm...

EUVD-2025-116517

Malicious code in ariel-docusaurus-build-postcss npm...

EUVD-2025-111244

Malicious code in metalsmith-build-cressida-superagent npm...

EUVD-2025-115911

Malicious code in build-terser-chariklo-jsonp npm...

EUVD-2025-116876

Malicious code in aether-build-rest-epimetheus npm...

Malicious code in changelog-library-morgan-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55450bda6649eced55284a2e5cb1d17294f7d951afd2040f864d9af5c7287948 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-build-css-loader-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f3b812757c3e29f823e8d9b9e8e9f4a5b40ec2173f90d8a330a1d86980db6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146282 Malicious code in playwright-library-build-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector accd70c1139e0458aefe8218d3b4dbe2ab9d2ed5d6838ed332328f9a10b2e2f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140181 Malicious code in build-altair-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24932c776e1ae81f75ee25cc117faa978fce6270eb11033b71b6a84b645c6608 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146427 Malicious code in postcss-yaml-lynx-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7991fb1fffadbc9283f03779f51fa19d71c12c033f9ba3a11c26f4941dcd670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143650 Malicious code in inquirer-lacerta-build-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475e7d0078037660a995d748c438866f42b5e35f4eeedbfb1f11d0d005bb3ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144095 Malicious code in karma-build-sass-loader-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0a1706c5747b57ad2a3fafbe469c5561cf6c547799ef10865bda8f35e773b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...