EUVD-2025-113448

Malicious code in foundation-adonis-duplex-bootstrap npm...

Malicious code in duplex-browserify-magellan-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115318

Malicious code in cli-cluster-duplex-eslint-config npm...

EUVD-2025-114300

Malicious code in duplex-galaxy-postgres-bellatrix npm...

EUVD-2025-116304

Malicious code in await-frontend-duplex-html-webpack-plugin npm...

EUVD-2025-114293

Malicious code in duplex-octans-proxima-aether npm...

EUVD-2025-114302

Malicious code in duplex-duplex-nightwatch-dagda npm...

EUVD-2025-124257

Malicious code in nova-postcss-loader-nuxtjs-duplex npm...

Malicious code in hydra-duplex-ursa-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6937793f75424fe2d5f90958bdbbc1a856bd441f4ed9d7ca875e9d24f80bbf65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112294

Malicious code in janus-meissa-duplex-airbnb npm...

Malicious code in pulsar-duplex-chakra-ui-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 475125da4e180577d2f6485fc6337dd3a6e8b9207f29411adea8142ac112a81c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120614

Malicious code in webdriver-manager-duplex-aurora-wezen npm...

EUVD-2025-112467

Malicious code in inquirer-duplex-process-hyperion npm...

Malicious code in geckodriver-magellan-csv-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

MAL-2025-141815 Malicious code in duplex-lyra-ganymede-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6181a01a81a8c552364326cd66c46972737bab6c3ec6343db604561f155826d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141804 Malicious code in duplex-browserify-magellan-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...