EUVD-2025-113249

Malicious code in geckodriver-dependencies-ursa-thuban npm...

Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

EUVD-2025-114536

Malicious code in dependencies-local-lint-spinner npm...

EUVD-2025-111924

Malicious code in koa-dependencies-jabbah-telesto npm...

EUVD-2025-120977

Malicious code in uninstall-apollo-gacrux-dependencies npm...

EUVD-2025-122660

Malicious code in repository-dependencies-hydra-async npm...

EUVD-2025-112252

Malicious code in jasmine-prettier-stylelint-dependencies-europa npm...

EUVD-2025-114534

Malicious code in dependencies-mongoose-markdownlint-global npm...

Malicious code in antares-epimetheus-chromedriver-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf16ba048e95255889c5ed8190c85f42d4544c094dfce96a156909536a2c8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124496

Malicious code in nextjs-react-bootstrap-dependencies-nova npm...

Malicious code in dependencies-restart-luna-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-dotenv-kinetic-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49ec590f507986f683aab863db75e6bd4c52df9e191f65b55252813aa649ffbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114519

Malicious code in dependencies-xerxes-gulp-equinox npm...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149649 Malicious code in xenon-loglevel-dependencies-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ad8a76a0c927609f542c4e8499f14c5106f04ae721ea5b396d3f82f12586e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141572 Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...