Malicious code in chakra-ui-eslint-plugin-dependencies-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e7a73390160c376cfb3e4a5257b5aac4adef6048328297cde111fdbe358c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122692

Malicious code in release-it-phoenix-node-sass-dependencies npm...

EUVD-2025-120282

Malicious code in xenon-loglevel-dependencies-request npm...

EUVD-2025-113513

Malicious code in fork-spectron-dependencies-stop npm...

Malicious code in cross-env-semantic-ui-dependencies-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6332d430064a3f2838ee485b692085966c87a656a847987e105921afff07be4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-fusion-prettier-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b282945432c3d34eb90c67d81f9fdba5527b68fe207aa9b76015411e02c7438b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120977

Malicious code in uninstall-apollo-gacrux-dependencies npm...

EUVD-2025-120783

Malicious code in version-transport-vuepress-dependencies npm...

Malicious code in fork-spectron-dependencies-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f8bbbe5b604f411d47add472ae97a662f6fee39bcab86f107ae9673bf8f6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-epimetheus-chromedriver-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf16ba048e95255889c5ed8190c85f42d4544c094dfce96a156909536a2c8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124585

Malicious code in nebula-bootes-dependencies-kaus npm...

EUVD-2025-115469

Malicious code in chalk-ganymede-dependencies-oauth npm...

EUVD-2025-113506

Malicious code in fornax-apollo-dependencies-sirius npm...

EUVD-2025-120128

Malicious code in yaml-publish-dependencies-eslint-plugin npm...

EUVD-2025-115402

Malicious code in chariklo-mongoose-dependencies-astro npm...

EUVD-2025-114524

Malicious code in dependencies-sync-eridanus-bunyan npm...

EUVD-2025-116752

Malicious code in altair-dependencies-foundation-rate-limiter npm...

EUVD-2025-114837

Malicious code in cross-env-semantic-ui-dependencies-europa npm...

EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...