EUVD-2025-123738

Malicious code in phoebe-spectron-webdriver-eleventy-envconfig npm...

EUVD-2025-123331

Malicious code in procyon-envconfig-readable-meissa npm...

EUVD-2025-123934

Malicious code in passport-sedna-envconfig-gridsome npm...

EUVD-2025-124898

Malicious code in miranda-betelgeuse-envconfig-hyperion npm...

EUVD-2025-124791

Malicious code in mongodb-europa-apollo-envconfig npm...

EUVD-2025-121832

Malicious code in spawn-apollo-envconfig-jabbah npm...

Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121332

Malicious code in testcafe-hyperion-envconfig-tool npm...

EUVD-2025-114027

Malicious code in envconfig-package-socketio-gacrux npm...

EUVD-2025-114040

Malicious code in envconfig-bootstrap-uglify-js-colors npm...

EUVD-2025-120752

Malicious code in virgo-zenith-rocket-envconfig npm...

EUVD-2025-116143

Malicious code in bellatrix-titan-eslint-config-envconfig npm...

EUVD-2025-112393

Malicious code in iota-dotenv-parse-variables-envconfig-mdx npm...

MAL-2025-142072 Malicious code in envconfig-csv-build-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa540d749d3bafec4df5a69032f942824402ebe3bf915276f5f9071e5251564c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142720 Malicious code in fusion-apollo-style-loader-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81e697bff033a44314f01620f35bf49c622e6ce1d0f971103c8b1871fda65d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146338 Malicious code in polaris-equinox-envconfig-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a382237b08b549bc7eda0f326619bb3126d3117d0fa08b614a2f7c628fc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142084 Malicious code in envconfig-pulsar-ganymede-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9d273af31417a606c7ba3620cffa410dc76bc49ce822f63c70b2ea7760ad981 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147560 Malicious code in sadr-envconfig-auth0-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f7faf91afa0b899372f0025c962cd94361782828e6bb8cefd809cd004e8713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142070 Malicious code in envconfig-bootstrap-uglify-js-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bfd4098356c8ae408716b081b72671e5e811c3ef40bc851d469ae14849c5741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...