EUVD-2025-113303

Malicious code in ganymede-lyra-arcturus-firebase npm...

EUVD-2025-123115

Malicious code in publish-prompts-dynamo-firebase npm...

EUVD-2025-122795

Malicious code in registry-firebase-less-loader-subscription npm...

EUVD-2025-113937

Malicious code in eris-firebase-uglify-js-csrf npm...

Malicious code in firebase-sagitta-tool-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113771

Malicious code in exec-firebase-iota-changelog npm...

EUVD-2025-124885

Malicious code in miranda-firebase-non-blocking-cygnus npm...

EUVD-2025-121059

Malicious code in uglify-js-child-process-meissa-firebase npm...

EUVD-2025-123842

Malicious code in perseus-cosmiconfig-firebase-quark npm...

EUVD-2025-112968

Malicious code in halley-grunt-firebase-nebula npm...

EUVD-2025-113601

Malicious code in firebase-relay-winston-webdriverio npm...

EUVD-2025-121790

Malicious code in spectron-webdriver-meissa-yakutsk-firebase npm...

EUVD-2025-123546

Malicious code in polaris-transform-firebase-quasar npm...

EUVD-2025-113610

Malicious code in firebase-leda-octans-postgres npm...

Malicious code in xenon-ursa-semantic-ui-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d87bbc1741065a631473700c3231b6c156699ec07fc6eb8220040d60406afa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...