EUVD-2025-114186

Malicious code in electron-orbit-eris-sagitta npm...

EUVD-2025-120750

Malicious code in vortex-apollo-luna-eris npm...

Malicious code in eris-public-metalsmith-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76cee348a9b3e9c807a98d182a4eb2314c88e555a006cddbd40e0be915a84a13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113931

Malicious code in eris-postcss-meissa-orbit npm...

EUVD-2025-113945

Malicious code in eris-chakra-ui-sass-loader-fornax npm...

Malicious code in eris-spawn-lynx-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14bca2ce67e69c781a2f7322159d6df5b7e238d726cee97432e040ca27711aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-redis-eris-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ecda13dd725bb7f0a39453bc3e1607040cbc5abf124f49a3821af1777448e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113930

Malicious code in eris-prompts-aurora-jupiter npm...

Malicious code in changelog-eris-apollo-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049d96747335ea7770993eb1f70fc96a4667abd33a8f58524be01f2c0992446b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148650 Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113947

Malicious code in eris-blaze-pegasus-electron npm...

Malicious code in neptune-version-eris-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0d74d8bf9d662ccbb903d0bbf47640da6df42e2465abce2007ff3446c08fd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-eris-rollup-plugin-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f9c685aef5b5b9c0f020ad1b241c7b6dc706cb726fd15aaf95398f50602866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124358

Malicious code in nodejs-eris-izar-semantic-release npm...

EUVD-2025-114941

Malicious code in corvus-tool-eris-uninstall npm...

EUVD-2025-113948

Malicious code in eris-barnard-passport-webdriver-manager npm...

EUVD-2025-121764

Malicious code in spica-eris-spica-exec npm...

Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142165 Malicious code in eris-chakra-ui-sass-loader-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb06093fde32832822f36661642b3ab387c58a1ce995ae5993df5d4f745159fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...