EUVD-2025-116779

Malicious code in alphard-express-pulsar-schema npm...

EUVD-2025-113727

Malicious code in express-meteor-colors-chariklo npm...

Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113729

Malicious code in express-lint-jsonp-nightwatch npm...

EUVD-2025-122364

Malicious code in sadr-corvus-canopus-express npm...

EUVD-2025-122304

Malicious code in sagitta-sirius-express-async npm...

Malicious code in chakra-ui-vega-express-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0df3b2ac23be1e355e72eb882ad33832dee620205b49d584c3786346b4f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123972

Malicious code in parcel-auriga-express-metalsmith npm...

EUVD-2025-120696

Malicious code in vulcan-express-phenomic-meteor npm...

Malicious code in express-meteor-colors-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d669fa9c44fcc67de8380cae4a7c1630c7f8dd8f2b7ce7cfcc91f937256c1721 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113715

Malicious code in express-winston-yakutsk-halley npm...

EUVD-2025-114283

Malicious code in dynamo-express-quito-avior npm...

EUVD-2025-120307

Malicious code in xanthus-express-prettier-duplex npm...

Malicious code in despina-express-indus-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 169d8507322147c12e5ffd5c35633e28f481a208635b780d832dbaf2ed12dfd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115126

Malicious code in commitlint-exec-express-perseus npm...

Malicious code in express-auth-registry-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec068853f97580dd89c495e698ab8c8a2106c601302c5315c4b5fd9a753ce00e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-epimetheus-transform-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e3d5027fe575e774c42be59151b712d7df1bf2876ab3c75535e3bdafa0779b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111307

Malicious code in meissa-hugo-express-uninstall npm...

Malicious code in express-venus-sails-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2233a552474c5eed5adf76810c6bdd4302fb6368b7098734f8aa7a3399da5506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142370 Malicious code in express-cassini-warp-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddd22234b7a86537f1ae17969398bec86c8f6bda4b4fed0732595138012dbb89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...