EUVD-2025-114296

Malicious code in duplex-jsonp-zenobia-gemini npm...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...

EUVD-2025-112467

Malicious code in inquirer-duplex-process-hyperion npm...

EUVD-2025-122192

Malicious code in scripts-eridanus-duplex-spawn npm...

Malicious code in duplex-babel-npm-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113160

Malicious code in global-uninstall-sadr-duplex npm...

EUVD-2025-123767

Malicious code in phoebe-jasmine-betelgeuse-duplex npm...

MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142310 Malicious code in event-duplex-node-config-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91782b6d72afe4d207bd69bcfab8387ad5e5b1f67818488fa1c67774655d9e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112367

Malicious code in iota-umbriel-duplex-selenium npm...

EUVD-2025-114291

Malicious code in duplex-procyon-polaris-mutation npm...

EUVD-2025-115720

Malicious code in capella-duplex-upgrade-oauth npm...

Malicious code in cygnus-ini-duplex-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b52fe76d9e5026fde08f9e1d6eb70e48547f0d6ff62a3d66b10fce1d7024f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114298

Malicious code in duplex-hyperion-arcturus-nestjs npm...

Malicious code in nconf-alphard-electron-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f56efbf37a7c3c9f8f377dd8543c4fb306af60ce943f5db4d631ad8a3ddc5a3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113846

Malicious code in europa-duplex-gulp-magellan npm...

EUVD-2025-112896

Malicious code in heka-rehype-duplex-ursa npm...

EUVD-2025-113646

Malicious code in figures-duplex-husky-electron npm...

EUVD-2025-124618

Malicious code in nconf-alphard-electron-duplex npm...

EUVD-2025-122191

Malicious code in scripts-fork-duplex-meteor npm...