Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113850

Malicious code in europa-commitlint-config-angular-eslint-config-duplex npm...

EUVD-2025-114291

Malicious code in duplex-procyon-polaris-mutation npm...

EUVD-2025-124745

Malicious code in morgan-duplex-shelljs-odin npm...

EUVD-2025-120560

Malicious code in webdriverio-fornax-duplex-command npm...

EUVD-2025-113846

Malicious code in europa-duplex-gulp-magellan npm...

EUVD-2025-124721

Malicious code in mui-cosmos-less-loader-duplex npm...

EUVD-2025-124108

Malicious code in ophiuchus-duplex-koa-json npm...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

EUVD-2025-124324

Malicious code in nodemon-test-cressida-duplex npm...

EUVD-2025-114295

Malicious code in duplex-link-test-xanadu npm...

EUVD-2025-115127

Malicious code in commitlint-event-hapi-duplex npm...

EUVD-2025-114739

Malicious code in cygnus-ini-duplex-eris npm...

EUVD-2025-112801

Malicious code in hermes-cross-env-quasar-duplex npm...

MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114299

Malicious code in duplex-gridsome-antares-express npm...

EUVD-2025-114303

Malicious code in duplex-cordelia-package-mysql npm...

EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

MAL-2025-142310 Malicious code in event-duplex-node-config-public (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91782b6d72afe4d207bd69bcfab8387ad5e5b1f67818488fa1c67774655d9e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...