EUVD-2025-113663

Malicious code in fetch-iota-nightwatch-apollo npm...

Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111426

Malicious code in markdown-pdf-dactyl-ini-fetch npm...

EUVD-2025-120121

Malicious code in yildun-configstore-fetch-iota npm...

Malicious code in fetch-eleventy-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f18667d25c0946f9d261a0c1f9af093e7d6eae0fe031657ef5f01630c15a873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120640

Malicious code in wasat-fetch-event-airbnb npm...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113670

Malicious code in fetch-eleventy-phenomic-miranda npm...

EUVD-2025-122107

Malicious code in selenium-stream-fetch-deneb npm...

Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113672

Malicious code in fetch-corvus-auth-charon npm...

EUVD-2025-116778

Malicious code in alphard-fetch-corvus-command npm...

Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-114201

Malicious code in electron-builder-nconf-warp-fetch npm...

EUVD-2025-121873

Malicious code in socketio-fetch-deneb-redis npm...

EUVD-2025-113652

Malicious code in fetch-supervisor-phoenix-octans npm...

Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...