EUVD-2025-112771

Malicious code in hexo-fetch-jwt-typeorm npm...

EUVD-2025-112906

Malicious code in heka-jsonp-triton-fetch npm...

EUVD-2025-114760

Malicious code in csv-neptune-fetch-meteor npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

Malicious code in fetch-celeste-link-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd7a1846ff262e5c7b508f4b84abf81c837205c5ccd7d9dc7f3b32ee0d35ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142461 Malicious code in fetch-virgo-pegasus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccd32cdf50e098d0e2c2077c240e4daeb39d7defafc0a8c6f4ddebe06fe32de8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114201

Malicious code in electron-builder-nconf-warp-fetch npm...

EUVD-2025-122662

Malicious code in repository-commitlint-config-angular-fetch-xenos npm...

Malicious code in fetch-eleventy-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f18667d25c0946f9d261a0c1f9af093e7d6eae0fe031657ef5f01630c15a873 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124298

Malicious code in non-blocking-start-sequelize-fetch npm...

Malicious code in delphinus-elara-arcturus-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31c55e192550433235a3c031a4cda8b30ee9f66224b49942a341e0b5a126d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113667

Malicious code in fetch-halley-await-dotenv-safe npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

Malicious code in jsonp-charon-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81c33c6c2772ea53aa5ecd5175c851302123b223a7990f46762cba9948111efd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115083

Malicious code in config-izar-fetch-local npm...

EUVD-2025-114488

Malicious code in development-heka-fetch-deimos npm...

Malicious code in fetch-chalk-mysql-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eb1790d821ab22ac99c85478c2c0c64e0fa842b8042826889b140dcf3a613c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...