EUVD-2025-116262

Malicious code in axios-taurus-dependencies-schema npm...

MAL-2025-141272 Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114526

Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin npm...

EUVD-2025-114218

Malicious code in electron-altair-dependencies-capella npm...

MAL-2025-141586 Malicious code in dependencies-thuban-gulp-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be0be47005333170cf6e4d50d7fdb64e5071dd1c14f26d7d25354c38049bca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116438

Malicious code in atlas-uglify-js-dependencies-playwright npm...

EUVD-2025-120282

Malicious code in xenon-loglevel-dependencies-request npm...

Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122811

Malicious code in redis-phoenix-dependencies-ceres npm...

Malicious code in jekyll-castor-dependencies-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c96e67c6ad324876e8e775f06dd8ca2818411b3b50df8dd9368f502dfce5e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114816

Malicious code in csrf-postcss-dependencies-upgrade npm...

EUVD-2025-114522

Malicious code in dependencies-upgrade-request-celeste npm...

Malicious code in guilty_ape_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 043177cf992ec44d41a3f6493eebddb9ab8f003042a9bb1381d0df595817ca1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-98690 Malicious code in dutch_galliform_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 564c4c3d07d463ddb5695115f239373adfe2bf351e7d637a57bddbd898459bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-getas47-miaww (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94e86717a95348296454ce31bdb777604510ddf30616949757eab69ca74c93a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-76661 Malicious code in ember-addon-with-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030efb54b3c7ce3807868d73f64d415effba5c936da7b4fad9b37a7e184fbff7 The package ember-addon-with-dependencies was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in ember-addon-with-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 030efb54b3c7ce3807868d73f64d415effba5c936da7b4fad9b37a7e184fbff7 The package ember-addon-with-dependencies was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-70735 Malicious code in soviet-copper-sawfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c610ef07f4b6e47a15a61fd1b1bb6e66da27eda0864d5520b02f8c7179035c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...