MAL-2025-189158 Malicious code in relay-tardigrade-typeorm-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68e65873a2865720e808f1d146398547f6af6787ab402144f49958f3ae3b6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176654

Malicious code in restart-virtualreality-cli-spectron npm...

EUVD-2025-180285

Malicious code in astrometry-kaus-on-cli npm...

EUVD-2025-176216

Malicious code in start-iota-webpack-cli npm...

EUVD-2025-177395

Malicious code in outercore-cli-concurrently-troposphere npm...

EUVD-2025-112099

Malicious code in jsonp-writable-grus-cli npm...

EUVD-2025-123864

Malicious code in pegasus-superagent-await-cli npm...

EUVD-2025-112471

Malicious code in inquirer-cli-hermes-commitizen npm...

EUVD-2025-115301

Malicious code in cli-passport-iota-corvus npm...

EUVD-2025-115306

Malicious code in cli-lynx-nova-element-ui npm...

EUVD-2025-124390

Malicious code in node-sass-cli-phenomic-webpack npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124185

Malicious code in oauth-nextjs-winston-cli npm...

EUVD-2025-120646

Malicious code in wasat-cli-barnard-style-loader npm...

Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115293

Malicious code in cli-version-standard-antares npm...

MAL-2025-140799 Malicious code in cli-geckodriver-sirius-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e1410ae9b38e65f7afbdffabb2ae9666d120b7fd9146797cb25adf35a46ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147760 Malicious code in sedna-cli-csrf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e23e8cd40c2c78f1ec47be9e930934db34eeffed408bdcbbd9688392b70daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...