EUVD-2025-115273

Malicious code in cluster-rigel-pino-chalk npm...

EUVD-2025-115287

Malicious code in cluster-callisto-ursa-standard npm...

Malicious code in alphard-cluster-reveal-md-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee22bbbe9632215a2c3c8b8578c6322a0cfb2caa0be027efb0af754d7e2e82ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124704

Malicious code in mui-uglify-js-ophiuchus-cluster npm...

EUVD-2025-116520

Malicious code in ariel-cluster-yaml-vega npm...

Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111242

Malicious code in metalsmith-cluster-epimetheus-backend npm...

EUVD-2025-123995

Malicious code in package-canopus-cluster-grus npm...

MAL-2025-143050 Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115279

Malicious code in cluster-kaus-tethys-meissa npm...

EUVD-2025-115270

Malicious code in cluster-upgrade-graphql-quantum npm...

Malicious code in quasar-cluster-deneb-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6606800f76541e00a782f9c5c9f56d495b46fd423e3525710c8c3ad613f6270 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122979

Malicious code in quasar-cluster-deneb-indus npm...

EUVD-2025-114809

Malicious code in css-loader-cygnus-restart-cluster npm...

EUVD-2025-112599

Malicious code in ignite-foundation-cluster-spinner npm...

MAL-2025-140831 Malicious code in cluster-markdownlint-equinox-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c171761f3cbbf27925b3aaa8a534f93727568b8a0eb9097d587828f151e01f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140840 Malicious code in cluster-vuepress-local-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba5995f015aece736746172c3055bf5068e71c1631e6799cecd57bb4feb8dac1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143963 Malicious code in json-backend-cluster-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 137494e90d691d103e85bb0225ed5872324f19293c8693136a7256c055113dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142590 Malicious code in fork-helmet-telesto-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679ea7ca27cc8b5ba3c2132e37b1bc1dbea0f92c14cdb6fcb9ce04322da927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141656 Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...