EUVD-2025-111923

Malicious code in koa-development-nebula-perseus npm...

EUVD-2025-114493

Malicious code in development-chariklo-server-janus npm...

EUVD-2025-121734

Malicious code in spinner-development-cassini-umbriel npm...

EUVD-2025-113434

Malicious code in framework-dactyl-exec-development npm...

EUVD-2025-116305

Malicious code in await-dynamo-europa-development npm...

EUVD-2025-112797

Malicious code in hermes-development-virgo-promise npm...

Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-version-schema-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2586cf4822cda61df50eb0bfa4582629e0cd68ad53f04da400f1d2d3850cd2ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124096

Malicious code in ophiuchus-kinetic-development-ursa npm...

EUVD-2025-111972

Malicious code in kaus-elara-relay-development npm...

EUVD-2025-114474

Malicious code in development-taurus-slidev-deneb npm...

EUVD-2025-113053

Malicious code in grunt-development-postcss-loader-hydra npm...

EUVD-2025-122680

Malicious code in remark-async-development-exec npm...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

Malicious code in radiant-development-eslint-plugin-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 293c42ba0700755d809e0cffb5dd4eee0f25f2209932a17eabac567d484bb08f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-polaris-fusion-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e07928c11a8f6e58b9cae42dddfcfc6bd8f19d423bb3f515f3c11f5acc3363 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121900

Malicious code in soap-lacerta-development-element-ui npm...