MAL-2025-146118 Malicious code in perseus-spectron-webdriver-nconf-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f0fe45a7b9ee67b12ce68386241af989b4f9c8e068b0353797bc22300d63894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144192 Malicious code in koa-electron-reveal-md-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bc2848e7e40366ae4424bcf5d0323c1a8284f8c81db4e7d58b36a05f3f2ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147488 Malicious code in rollup-atlas-electron-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2af1ee5d3e4992b88a68bb2875b0a18c7257ad9df640d557993353350d1d85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148380 Malicious code in superagent-deneb-mui-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e52b99c6fcff081e31ec483416e07155aa049b9fecb93cb71ba0b66e3642d89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144057 Malicious code in jupiter-hexo-nestjs-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52307fbec88a4359738f1a4633c61900298bd8f2ce42dfa1b7e7cfc137ada7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142773 Malicious code in gacrux-nightmare-electron-builder-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4014bb2f2419fca4fca93e72a600a6fb2d56786b81f6dde8040e3a24004ef7ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140368 Malicious code in canopus-phoebe-electron-builder-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36eeabd19bdeac8a1ef874d116c625c345e5f293b115ed04241d7f4b9e3d9df9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144269 Malicious code in leda-eslint-leda-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d0de403fbc94af61fccdd6163d20a9945416d14997fb6cadf1babb2b5f9472d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147885 Malicious code in sequelize-webpack-electron-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7c6cef0d1f5fa1940739aefd12c411b829bbad3d9b0e3e28cb1c8356f08516b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114189

Malicious code in electron-init-vulcan-wolf npm...

Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114183

Malicious code in electron-polaris-sirius-apex npm...

EUVD-2025-116024

Malicious code in bootes-electron-builder-ariel-enceladus npm...

EUVD-2025-124520

Malicious code in nestjs-nodejs-electron-builder-auth npm...

Malicious code in pavo-nightwatch-electron-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76f4dceed378716fcc9345a96d156b39cf00ed7d7f0067593d60376665be4ff8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113967

Malicious code in eridanus-enif-magellan-electron npm...

EUVD-2025-112600

Malicious code in ignite-event-electron-testcafe npm...

Malicious code in ignite-event-electron-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ca853b7488e1b84824a0a0442db77c0c62117092fb5de97b13bc30f7b2c3345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...