EUVD-2025-176670

Malicious code in resolvers-typeorm-dependencies-development npm...

Malicious code in slidev-rigel-uninstall-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 369f65bcbf5e2d48d9e17b9296807921545dc9a753ca7caf4e9eb9308cc8b5af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179307

Malicious code in development-dependencies-cybernetics-cryptography npm...

EUVD-2025-176501

Malicious code in schema-dependencies-paleoanthropology-xenos npm...

MAL-2025-190158 Malicious code in virgo-framework-dependencies-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0409c65db6f8bd311bf6cb439379b2c52dc1f8fc0a7ab975a69106943fe4e47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168634 Malicious code in tealove-okta9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03b0d47864bb015cc8ca4dc650616bea147f0f88a7798f7c90cb059a17b75e87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114546

Malicious code in dependencies-changelog-cosmiconfig-colors npm...

EUVD-2025-115131

Malicious code in commitlint-dependencies-loopback-proxima npm...

EUVD-2025-114539

Malicious code in dependencies-install-xenon-venus npm...

EUVD-2025-116337

Malicious code in avior-dependencies-radiant-eridanus npm...

EUVD-2025-113179

Malicious code in global-eris-dactyl-dependencies npm...

Malicious code in dependencies-lyra-forever-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8637e6125cafd55c9981aedd548b7e3f429b8fd732f4c1c4d35447b66db76ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111848

Malicious code in leda-dependencies-fomalhaut-rocket npm...

Malicious code in mocha-ganymede-dependencies-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbf7f214a0fd32e6dffcfce3cd4db712ae91ae3fc1f73988bdf26b98e0d7c66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114530

Malicious code in dependencies-request-private-gridsome npm...

EUVD-2025-120783

Malicious code in version-transport-vuepress-dependencies npm...

EUVD-2025-123100

Malicious code in publish-webpack-configstore-dependencies npm...

EUVD-2025-124245

Malicious code in npm-dependencies-cypress-protractor npm...

Malicious code in dependencies-rimraf-local-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054b2d956edf01f7319f62c077101349cd5044afb5c88bc418ae0072e0c3a095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uninstall-apollo-gacrux-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5519f459b0ae7839ec0ab31389af3597e630d33968dd80b319073346517cae0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...