MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140799 Malicious code in cli-geckodriver-sirius-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e1410ae9b38e65f7afbdffabb2ae9666d120b7fd9146797cb25adf35a46ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-cli-charon-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e51d72c3d0f1f895665fca468290ffd1c71c1ffefce6a9d6d60b92d1e49c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116359

Malicious code in auth0-cygnus-farout-cli npm...

EUVD-2025-123864

Malicious code in pegasus-superagent-await-cli npm...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-114110

Malicious code in eleventy-kastra-cli-sedna npm...

EUVD-2025-115308

Malicious code in cli-gemini-kastra-unuk npm...

EUVD-2025-115316

Malicious code in cli-dactyl-restart-meteor npm...

EUVD-2025-115299

Malicious code in cli-rimraf-callback-exec npm...

EUVD-2025-124490

Malicious code in nightmare-cli-ursa-phenomic npm...

EUVD-2025-112470

Malicious code in inquirer-cli-spinner-antd npm...

EUVD-2025-124381

Malicious code in node-sass-gacrux-venus-cli npm...

EUVD-2025-112437

Malicious code in install-europa-aquarius-cli npm...

EUVD-2025-120038

Malicious code in zephyr-resolvers-cli-concurrently npm...

EUVD-2025-115303

Malicious code in cli-norma-celeste-less npm...

EUVD-2025-112190

Malicious code in jest-flare-less-cli npm...

MAL-2025-140503 Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...