Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-eleventy-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f18667d25c0946f9d261a0c1f9af093e7d6eae0fe031657ef5f01630c15a873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

EUVD-2025-112771

Malicious code in hexo-fetch-jwt-typeorm npm...

EUVD-2025-113670

Malicious code in fetch-eleventy-phenomic-miranda npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123790

Malicious code in phenomic-element-ui-publish-fetch npm...

EUVD-2025-112224

Malicious code in javascript-readable-fetch-nconf npm...

EUVD-2025-120330

Malicious code in xanadu-miranda-fetch-aurora npm...

EUVD-2025-114326

Malicious code in dotenv-safe-zenith-configstore-fetch npm...

EUVD-2025-116236

Malicious code in babel-kronos-xenon-fetch npm...

Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-114456

Malicious code in dione-warp-fetch-wasat npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-fetch-corvus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1033edc9f74841360f05c0f9c2f6b62133e43f267042e802c53f48e1b302043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...