EUVD-2025-121875

Malicious code in socketio-eris-delphinus-sass-loader npm...

EUVD-2025-122439

Malicious code in rocket-tethys-restart-eris npm...

EUVD-2025-113945

Malicious code in eris-chakra-ui-sass-loader-fornax npm...

EUVD-2025-113939

Malicious code in eris-eslint-plugin-slidev-resolvers npm...

EUVD-2025-120523

Malicious code in webpack-rimraf-eris-writable npm...

Malicious code in xerxes-weywot-eris-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009132446e6de1cf47b905af2f0ffc0bcef9821a4af74b0725341515abc2680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113926

Malicious code in eris-spawn-lynx-testcafe npm...

MAL-2025-142172 Malicious code in eris-eslint-plugin-zenobia-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcfab6b0fb87953abbe4e024121bba676664db6493f779c6cd06e152a3238389 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139241 Malicious code in aether-redis-eris-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ecda13dd725bb7f0a39453bc3e1607040cbc5abf124f49a3821af1777448e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142681 Malicious code in framework-eris-nuxtjs-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65351c6929cec60563f9d875e745f9066af992685e01872ce292bf993c8ba1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149179 Malicious code in vortex-apollo-luna-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c40a7b13b8ae9ef5abf8a3a983d8979e4b96529ff8dfde107ef9f83fa76537b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142171 Malicious code in eris-eslint-plugin-slidev-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0320e0d702a39f689225390ed9c2d557b760f8f092af53cc00dbb747f1c95c68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148650 Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144144 Malicious code in kaus-gatsby-mysql-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e5665518e65d519d977b2cc707a78c6be8ef6a5efb223966857feb2b01b5b68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142167 Malicious code in eris-command-rate-limiter-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7abe993bf638dbe98c04283aed6d10f5a2bb33bcdb8c09e606063d2c0a09e55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147346 Malicious code in rest-eris-norma-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bbf62dbc0285b74b3bcefcc881a1cd6aae2fdae5f5a5027a8f2028f804ce385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142830 Malicious code in gatsby-antares-metalsmith-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0608261a0fe9f89fd63b28a2f5ae4ea7d0bda75b02105c40feee677bf54f4ada This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...