EUVD-2025-124846

Malicious code in mocha-dorado-europa-configstore npm...

EUVD-2025-115055

Malicious code in configstore-graphql-pm2-virgo npm...

EUVD-2025-115377

Malicious code in charon-polaris-socketio-configstore npm...

EUVD-2025-115977

Malicious code in bootstrap-wezen-selenium-configstore npm...

Malicious code in configstore-apollo-mira-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53f886345bbcfc473d8d3b4a18ff79cbd8439b3bac331f5bdacfb2166336a495 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140716 Malicious code in chariklo-zenith-proxima-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145111 Malicious code in module-nestjs-convict-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0597fa9a588ae3af2a54589c51cad71f570903d12c726485ea45874f01d571b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115388

Malicious code in charon-configstore-polaris-dependencies npm...

MAL-2025-139480 Malicious code in apex-html-webpack-plugin-configstore-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 775b8b2c4b1d74cbab0589fdfa152118eaaf2aa7aa84d5514a8cd43e5d42bf6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149224 Malicious code in vulcan-blitz-got-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f3a91dd5ac69a536e196591b1be2a0ab84547b5642fb5b934f4f6ba732d14a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146420 Malicious code in postcss-protractor-karma-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d16675a33058376a90e011bd1d015a37a8d8b845bea120f47975b1d70153514a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146363 Malicious code in polaris-repository-ignite-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54010ef3eed19bcf96488eff384a8b20c5631c658cf381d8e92f2484cdaff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141050 Malicious code in configstore-enif-development-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18867f5616affb9421d74ecd880425debcb7b7e0fc1670211003ddec8dc395d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141066 Malicious code in configstore-titan-spica-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47d4323dfe5c95c01f1b85cbb867e70a807bdfd1bf229b6f11b8e1feca94fae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148181 Malicious code in spica-terser-configstore-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18813c3e1ff9705d5e8cc26b5c1dbbcfc10f8bda51eec707edc856eeba57da51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144235 Malicious code in lacerta-configstore-cz-conventional-changelog-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0a3732e31985a11e0193d3314a95967bfe48f5cac077d7528b1c51f6e81c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meissa-gridsome-zooarchaeology-configstore (npm)

The package meissa-gridsome-zooarchaeology-configstore was found to contain malicious code...

Malicious code in mongoose-quark-configstore-dotenv (npm)

The package mongoose-quark-configstore-dotenv was found to contain malicious code...

Malicious code in configstore-oberon-proxima-duplex (npm)

The package configstore-oberon-proxima-duplex was found to contain malicious code...