MAL-2025-149094 Malicious code in vega-mongodb-electron-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bccff857de064e223be5a6316426e31d89961a5134a8abfad63569e9d3bd2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141908 Malicious code in electron-builder-mensa-capella-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c324de26b9b9044a959f6ee90bfbb74d52d4f086add21d9857bac277be23aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112898

Malicious code in heka-private-electron-builder-gridsome npm...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142569 Malicious code in forever-init-hermes-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141775 Malicious code in dotenv-safe-rocket-yildun-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab681a6c2a430ed29dad736b499a541d332284c90b454364ac5649861285a1e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141920 Malicious code in electron-hugo-link-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78f100f8b5a13d11ccdf9de9d337b8202eda41ec541af1a521b3ae2e6fe73503 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114621

Malicious code in deimos-aurora-electron-unuk npm...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115544

Malicious code in ceres-electron-builder-nuxtjs-acamar npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

EUVD-2025-120476

Malicious code in wezen-electron-scripts-blaze npm...

Malicious code in electron-forever-cypress-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6bec960c5d2c7b30446df4bb08b2972ef4d36ff312d03c3c4bce4b033e08d25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113339

Malicious code in gacrux-nightmare-electron-builder-warp npm...

EUVD-2025-113052

Malicious code in grunt-electron-pulsar-kinetic npm...

EUVD-2025-113842

Malicious code in europa-fusion-cross-env-electron-builder npm...

EUVD-2025-122481

Malicious code in rigel-tailwindcss-electron-bunyan npm...

EUVD-2025-113543

Malicious code in forever-init-hermes-electron npm...

Malicious code in yakutsk-electron-request-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e539cb02c91ae228f455572ac5991dd7b11d2b868b70f0070586ea8fd26a43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...