MAL-2025-140214 Malicious code in bulma-halley-gemini-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ee5c5bdfa023d9e60148efa3bd49c6f1b6dc9220ac4b6a1312aa3d62533882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147437 Malicious code in rigel-npm-husky-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4121d03d3d7344a67a6387fb32c258d9a8f98720a9c72f0c3078d499a9a5baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145544 Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122779

Malicious code in regulus-bulma-fornax-norma npm...

EUVD-2025-121381

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...

Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114649

Malicious code in dagda-antares-bulma-mira npm...

EUVD-2025-121417

Malicious code in terser-centauri-celeste-bulma npm...

EUVD-2025-122383

Malicious code in run-script-bulma-jupiter-magellan npm...

EUVD-2025-115444

Malicious code in changelog-bulma-meissa-cz-conventional-changelog npm...

EUVD-2025-121090

Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...

Malicious code in bulma-webdriver-mocha-chariklo-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f76f4befed367725c54fd0a28c5edda5b5d5e711a7c93746a910206e99aaaea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115079

Malicious code in config-lynx-bulma-webdriver-mocha npm...

EUVD-2025-111326

Malicious code in meissa-antares-fusion-bulma npm...

Malicious code in bulma-halley-gemini-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ee5c5bdfa023d9e60148efa3bd49c6f1b6dc9220ac4b6a1312aa3d62533882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115893

Malicious code in bulma-duplex-sails-blaze npm...

EUVD-2025-116892

Malicious code in adonis-bulma-metalsmith-triton npm...

EUVD-2025-116605

Malicious code in apollo-bulma-polaris-inquirer npm...

Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jwt-bulma-private-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6440b82a3e373f0f05f339f463a887f1b1c5f60136c927d1d72f65b011de2bf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...