MAL-2025-140018 Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144559 Malicious code in loopback-neptune-draco-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863bf80300eab0764f6d6d3b01b0dce677accede3ce2225fb1ebda3b3224b812 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

Malicious code in sequelize-indus-weywot-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0276c5198a70a0a304293120e13ff16584af2f2ecfb9024ac2e14cc3b044a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115105

Malicious code in concurrently-deimos-scorpius-kaus npm...

EUVD-2025-115100

Malicious code in concurrently-oberon-docusaurus-version npm...

EUVD-2025-121894

Malicious code in soap-postcss-kaus-concurrently npm...

EUVD-2025-123276

Malicious code in promise-protractor-concurrently-passport npm...

EUVD-2025-115442

Malicious code in changelog-concurrently-sync-antares npm...

MAL-2025-145532 Malicious code in node-sass-concurrently-markdown-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cecbf1725b1fe3550e4535c888b84b76843307d046713ddb77493b16889d15e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143817 Malicious code in janus-meissa-async-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8375482f6b277cc61492190443b2cfe5a3ab44b8a36fb400b592ba1fdb2a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145765 Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147121 Malicious code in registry-concurrently-hercules-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3a3ca3e3f6a93be7a3b7c1f73be13aa079cbd8125e49441cdda0d0fbe78b212 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112472

Malicious code in inquirer-child-process-concurrently-despina npm...

Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149227 Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02af8e5f5322a6dd20faee018c741ee859aab71d39ab4c17c10a576073f4f1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142543 Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74d06ffce784053f018ae7e3a21129547d5cdfba1edf9f5677c976fc3e6855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123650

Malicious code in pipe-umbra-mira-concurrently npm...

EUVD-2025-113080

Malicious code in gravity-xenos-postgres-concurrently npm...

EUVD-2025-111469

Malicious code in magellan-markdownlint-concurrently-wasat npm...