EUVD-2025-114223

Malicious code in elara-prettier-plugin-markdown-figures-await npm...

EUVD-2025-120356

Malicious code in writable-neptune-figures-oauth npm...

EUVD-2025-123372

Malicious code in process-figures-run-script-node-config npm...

EUVD-2025-121781

Malicious code in spectron-webdriver-uglify-js-figures-auriga npm...

EUVD-2025-116773

Malicious code in alphard-karma-airbnb-figures npm...

EUVD-2025-113627

Malicious code in figures-upgrade-hermes-relay npm...

EUVD-2025-120817

Malicious code in venus-figures-configstore-dotenv-parse-variables npm...

Malicious code in cordelia-meteor-figures-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f31812e41d80802d25f048b20a70c312ee134f0351b57c00e9e1987bdf010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113646

Malicious code in figures-duplex-husky-electron npm...

Malicious code in vortex-figures-cache-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d782950b16943e3cb29a62f055bb783b7406718622dd374dd0556b9974944d6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123574

Malicious code in polaris-inquirer-hexo-figures npm...

EUVD-2025-113643

Malicious code in figures-halley-cygnus-comet npm...

Malicious code in spawn-figures-async-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56662d4f8f23678a960291b8d19f3aa545e75a2346fcb87bce99a7c591855648 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123490

Malicious code in postgres-figures-wezen-grus npm...

EUVD-2025-115169

Malicious code in commitizen-rimraf-figures-phoebe npm...

EUVD-2025-123829

Malicious code in perseus-kronos-figures-commitlint-config-angular npm...

EUVD-2025-115258

Malicious code in colors-figures-hermes-babel npm...

EUVD-2025-115920

Malicious code in build-figures-module-acamar npm...

MAL-2025-142475 Malicious code in figures-nuxtjs-aldebaran-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d20e672be0e7ae2cb3cce6b529f93f301ce63e17a79f21d9caf75844ae38c829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140119 Malicious code in bootstrap-rollup-figures-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc950508599104478cefa863ecb90a39d15f9b7095bafe4d9c802576eb00031f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...