EUVD-2025-114201

Malicious code in electron-builder-nconf-warp-fetch npm...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-113669

Malicious code in fetch-europa-schema-leda npm...

EUVD-2025-112209

Malicious code in jekyll-fetch-lyra-lint npm...

EUVD-2025-113678

Malicious code in fetch-bellatrix-celeste-jwt npm...

EUVD-2025-113655

Malicious code in fetch-quasar-jabbah-superagent npm...

EUVD-2025-112906

Malicious code in heka-jsonp-triton-fetch npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

EUVD-2025-113680

Malicious code in fetch-adonis-less-loader-figures npm...

EUVD-2025-123790

Malicious code in phenomic-element-ui-publish-fetch npm...

Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111426

Malicious code in markdown-pdf-dactyl-ini-fetch npm...

Malicious code in socketio-fetch-deneb-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 257183e6dbffbc9a14a3cc9fb84f992087f217c37378c096b9e0c5a0d86f8502 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116778

Malicious code in alphard-fetch-corvus-command npm...

Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121873

Malicious code in socketio-fetch-deneb-redis npm...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122107

Malicious code in selenium-stream-fetch-deneb npm...

Malicious code in config-izar-fetch-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a2d8fc86c6915594384794a9189606b65ba1f652cdae1d45debe45640afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142460 Malicious code in fetch-virgo-nashira-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...