EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

EUVD-2025-120330

Malicious code in xanadu-miranda-fetch-aurora npm...

EUVD-2025-113653

Malicious code in fetch-start-carpo-pino npm...

EUVD-2025-113668

Malicious code in fetch-event-cosmiconfig-chalk npm...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111239

Malicious code in metalsmith-elektra-fetch-event npm...

Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113734

Malicious code in express-fetch-build-auth0 npm...

Malicious code in fetch-husky-slides-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb8880199d75a5db2d02dd91a1ba2e0c5eca450d26a8d696a8074ac48e4e0fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112859

Malicious code in helmet-fetch-forever-registry npm...

EUVD-2025-121872

Malicious code in socketio-fetch-jekyll-bellatrix npm...

MAL-2025-142439 Malicious code in fetch-corvus-auth-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de090b94808980372619b8096599353dd43a9676150155c1d8046afdbf5a8d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124298

Malicious code in non-blocking-start-sequelize-fetch npm...

MAL-2025-144586 Malicious code in luna-ultra-fetch-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f00ed8cbc51d9cd205cf472188ea84f2ab444b56ddf9af825ca395be404fd4c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-builder-nconf-warp-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7ab9cac20e5a2bc0455289471d23484573238aefff23152f6ba6ad37ef8acf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...