EUVD-2025-124585

Malicious code in nebula-bootes-dependencies-kaus npm...

EUVD-2025-115495

Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver npm...

EUVD-2025-114837

Malicious code in cross-env-semantic-ui-dependencies-europa npm...

Malicious code in atlas-uglify-js-dependencies-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7c01fe1d39d88bf4cd5a8c1ea901406f329f7b4aba7ecd8aabf15ba9c3ada4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121312

Malicious code in tethys-dependencies-janus-pulsar npm...

EUVD-2025-116487

Malicious code in astro-postgres-dependencies-bellatrix npm...

EUVD-2025-112654

Malicious code in hydra-standard-dependencies-fornax npm...

MAL-2025-142606 Malicious code in fornax-apollo-dependencies-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19d63b4026e2998bfa09edf925373b6179b99d47e1d6cbe6439ca7a0b37dad39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141577 Malicious code in dependencies-ophiuchus-mira-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965971ac63d1135f3c365360e6ff99a2601dc2921b09914c81c2cd91a897648c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141586 Malicious code in dependencies-thuban-gulp-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be0be47005333170cf6e4d50d7fdb64e5071dd1c14f26d7d25354c38049bca8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123432

Malicious code in prettier-plugin-markdown-nebula-indus-dependencies npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

EUVD-2025-115546

Malicious code in ceres-dependencies-restart-prompts npm...

MAL-2025-139840 Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139568 Malicious code in arcturus-dependencies-transport-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114537

Malicious code in dependencies-lacerta-hermes-install npm...

Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149146 Malicious code in version-transport-vuepress-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1c58e8fd28bd4e5dac34829ef4fa7f09faf7486ea71e6a4ee8f7d6828d4d11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116752

Malicious code in altair-dependencies-foundation-rate-limiter npm...

MAL-2025-144825 Malicious code in meissa-pipe-dependencies-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d83ca74cc580cbd8d76790318201e0cdecf41986d97cbcec98d9b091d4ea57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...