EUVD-2025-113595

Malicious code in firebase-tailwindcss-pegasus-json npm...

EUVD-2025-113594

Malicious code in firebase-tethys-lacerta-phoebe npm...

EUVD-2025-113593

Malicious code in firebase-webdriver-manager-vega-neptune npm...

EUVD-2025-113592

Malicious code in firebase-webpack-semantic-release-pegasus npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-114877

Malicious code in cressida-ganymede-firebase-google npm...

EUVD-2025-114452

Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase npm...

EUVD-2025-115518

Malicious code in chai-firebase-koa-wezen npm...

EUVD-2025-115146

Malicious code in commitlint-config-angular-firebase-node-config-wezen npm...

EUVD-2025-115058

Malicious code in configstore-firebase-dotenv-parse-variables-auth npm...

EUVD-2025-114969

Malicious code in cors-spinner-firebase-radiant npm...

EUVD-2025-116248

Malicious code in babel-dorado-firebase-readable npm...

EUVD-2025-116220

Malicious code in backend-configstore-node-sass-firebase npm...

EUVD-2025-116174

Malicious code in bellatrix-centaurus-toml-firebase npm...

EUVD-2025-116169

Malicious code in bellatrix-cz-conventional-changelog-firebase-version npm...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142497 Malicious code in firebase-equinox-subscription-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142503 Malicious code in firebase-meissa-loopback-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88272abc19fe27fd8fe14abf6c2687fd476bd7824effb94ab1db41c7704d3038 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...