EUVD-2025-112287

Malicious code in janus-phoebe-frontend-configstore npm...

EUVD-2025-124017

Malicious code in orbit-configstore-bellatrix-pavo npm...

EUVD-2025-123501

Malicious code in postcss-protractor-karma-configstore npm...

EUVD-2025-115043

Malicious code in configstore-titan-spica-cache npm...

EUVD-2025-123023

Malicious code in quantum-configstore-mensa-spica npm...

EUVD-2025-116622

Malicious code in apex-html-webpack-plugin-configstore-polaris npm...

EUVD-2025-115062

Malicious code in configstore-cygnus-envconfig-mongoose npm...

EUVD-2025-115064

Malicious code in configstore-apollo-mira-ariel npm...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115053

Malicious code in configstore-koa-auriga-ariel npm...

EUVD-2025-116187

Malicious code in barnard-nova-sass-loader-configstore npm...

MAL-2025-140125 Malicious code in bootstrap-wezen-selenium-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba700325c0ec38a68b85c35f22e10add36f7773904e951906f066fd96e60c3e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146710 Malicious code in proxima-configstore-postgres-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 780dcbaec41c4e20250e39de2cf359cc95f8977765f504674d4df2184b60f365 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141061 Malicious code in configstore-publish-callback-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbc0693eafa04b8a94047bef25c9cc975ce1f01682076e624ca0e6650756e06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140559 Malicious code in ceres-configstore-jwt-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49b37125288f59175aae4e6dc61e0ccea7b4160d5711e3420d95b347159ba37f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141048 Malicious code in configstore-dotenv-safe-chakra-ui-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51f2f08d540754dbc9b32830614d963586b1c8b2127b590941f2f7003486f5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148189 Malicious code in spinner-configstore-lynx-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ae63f9bdf59bd6c85aee247ecc80ee241e3e6ca01ddf21e3b29e53c823f97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142712 Malicious code in frontend-nuxtjs-configstore-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed224f2d4c4313c0bad8649b36a558e5a593b3dbbab706401a7a9e60a6208de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...