EUVD-2025-112421

Malicious code in io-cache-webdriverio-carina npm...

EUVD-2025-114552

Malicious code in deneb-restart-dagda-cache npm...

EUVD-2025-114058

Malicious code in enif-less-procyon-cache npm...

Malicious code in rest-tailwindcss-hyperion-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22a4a72ba894fba6775542bbfed8bdd8794b17d73198abd401b0c381988505 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122554

Malicious code in rest-tailwindcss-hyperion-cache npm...

Malicious code in commitizen-cache-spawn-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a0ef65d7296351d71c06f748a304a64aa2e5ce87ebd5092bc4ab6d793f938de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115183

Malicious code in commitizen-cache-spawn-vega npm...

EUVD-2025-116089

Malicious code in betelgeuse-weywot-cache-tool npm...

EUVD-2025-123003

Malicious code in quark-bunyan-cache-delphinus npm...

EUVD-2025-120758

Malicious code in virgo-sirius-prompts-cache npm...

EUVD-2025-113116

Malicious code in graphql-cache-dactyl-meteor npm...

MAL-2025-147584 Malicious code in sagitta-cache-cressida-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd6d33074d4639687ea4dc27c8f8a6f47a6cbd64b890cab5d26eea38f2de19bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143246 Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142369 Malicious code in express-cache-delphinus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17dc1e6ba2a45dc12dceb87e28914ac9cd5001e8b6b6191cdd71a441cb055f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142725 Malicious code in fusion-cache-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621eb24b99727465fefb65412655e97619b9b87c2400a9d7bbea63db7163d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139394 Malicious code in antares-cache-mira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a06fcb11ea86032290dda80052d64d12f5c4aa1efcd8a73ce4ac81ea8c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147937 Malicious code in sirius-cache-jasmine-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f0b886a8e9060a0198b0def36f25a5f7eadc58dbcf81abbf26dc31ece86a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144408 Malicious code in link-gravity-cache-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb48ae50821c55007a4579308b3d0c1e0ab08fef7b5c78d81a107f08d1b8512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143357 Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...