MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124766

Malicious code in mongoose-firebase-local-uglify-js npm...

EUVD-2025-113615

Malicious code in firebase-epimetheus-request-antares npm...

EUVD-2025-115327

Malicious code in chromedriver-oauth-janus-firebase npm...

MAL-2025-142509 Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113253

Malicious code in geckodriver-ceres-celeste-firebase npm...

EUVD-2025-113602

Malicious code in firebase-prompts-ophiuchus-spectron npm...

EUVD-2025-121575

Malicious code in subscription-betelgeuse-firebase-nconf npm...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

EUVD-2025-111509

Malicious code in lyra-elara-mongodb-firebase npm...

EUVD-2025-124175

Malicious code in oberon-firebase-tailwindcss-procyon npm...

EUVD-2025-112655

Malicious code in hydra-socketio-fornax-firebase npm...

EUVD-2025-113607

Malicious code in firebase-middleware-websockets-husky npm...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...