EUVD-2025-115160

Malicious code in commitizen-ursa-figures-winston npm...

EUVD-2025-120641

Malicious code in wasat-eslint-plugin-figures-tethys npm...

EUVD-2025-121219

Malicious code in toml-figures-got-cygnus npm...

EUVD-2025-113636

Malicious code in figures-nuxtjs-aldebaran-mini-css-extract-plugin npm...

EUVD-2025-124186

Malicious code in oauth-jsonp-figures-postcss-loader npm...

Malicious code in perseus-figures-gemini-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 049301f3a87fe026c73459018d72dee3cda74659e23386422463b25f859b71bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122228

Malicious code in schema-hermes-protractor-figures npm...

EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

Malicious code in writable-neptune-figures-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45124e351e80cd78250efde43533e5978c66164c5a2b54f3aec853be1434693b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123390

Malicious code in private-figures-package-commitlint-config-angular npm...

Malicious code in figures-middleware-centaurus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed8a57bf5c1a467cb3057d957940dc0b42c95b9b657a545064bed0abd5d9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112041

Malicious code in jwt-figures-ora-commitizen npm...

EUVD-2025-113644

Malicious code in figures-fusion-nextjs-auth0 npm...

EUVD-2025-113631

Malicious code in figures-protractor-changelog-fusion npm...

EUVD-2025-124455

Malicious code in nightwatch-figures-postcss-gacrux npm...

Malicious code in build-figures-module-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ace4a46ede4b2472a3a7452145025518e5fa58a5d553c0f4d1cae8f61157b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jovian-pegasus-fork-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69d19a2d6e02cc5e034b684051a6916cd908bb4104d27c1e3137f97d1def607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-figures-postcss-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5684f253471f3ad92faf82be19ae9e11bcc466730f601e3572e2e65b93347e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122158

Malicious code in sedna-graphql-figures-nodejs npm...

MAL-2025-149567 Malicious code in wolf-xo-meteor-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412da3d5b464f3ed5815a795d7eb08b586d9b4fc392cd09d79ea6cd8f12ec3b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...