EUVD-2025-116192

Malicious code in barnard-kastra-carina-envconfig npm...

EUVD-2025-113050

Malicious code in grunt-envconfig-bootes-eslint-plugin npm...

EUVD-2025-123093

Malicious code in pulsar-envconfig-nuxtjs-comet npm...

EUVD-2025-116841

Malicious code in airbnb-prettier-plugin-markdown-envconfig-helmet npm...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-repository-envconfig-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c89bf2c00540661d925a3c568b3f07900ba1f4bbff48ba51c779203bc515bb5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115191

Malicious code in command-ophiuchus-envconfig-meteor npm...

EUVD-2025-121841

Malicious code in solis-repository-envconfig-exec npm...

Malicious code in eleventy-envconfig-xml-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43b303cfab127f5de13e9ddbdc9cfbd359b52b49413136ffa41fc2ce9ad4d257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111961

Malicious code in kaus-nightwatch-uninstall-envconfig npm...

MAL-2025-144268 Malicious code in leda-envconfig-odin-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 545debb26587667e69b5f9503887007f02cbe554eb8a038763455fc702c9e014 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114024

Malicious code in envconfig-sagitta-procyon-process npm...

MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142070 Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142084 Malicious code in envconfig-pulsar-ganymede-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d273af31417a606c7ba3620cffa410dc76bc49ce822f63c70b2ea7760ad981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147782 Malicious code in sedna-parcel-schema-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76b84d5791a3dbd892a09ff247e6fc2d37a23c1113018b013617082887cde9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-44699 Malicious code in ini-envconfig-less-loader-hadron (npm)

The package ini-envconfig-less-loader-hadron was found to contain malicious code...

Malicious code in meteor-envconfig-update-lightyear (npm)

The package meteor-envconfig-update-lightyear was found to contain malicious code...