EUVD-2025-178892

Malicious code in firebase-helios-bionics-virtualreality npm...

EUVD-2025-180288

Malicious code in astroinformatics-brane-firebase-socketio npm...

EUVD-2025-175679

Malicious code in vuetify-firebase-darkmatter-mineralogy npm...

EUVD-2025-177001

Malicious code in prompts-spectron-firebase-frontend npm...

MAL-2025-189270 Malicious code in rollup-plugin-firebase-geochronology-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52e0281ce62a32de1725eb603807b7890d11f596aecd42507b277a31497e925c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186993 Malicious code in firebase-selenology-blitz-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ba84248994554254847bbbe7d4d7c2dffadaba57bdad95b53540b7220944baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186734 Malicious code in enceladus-module-firebase-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573f7098a653cd898218b7f6aa6ce36b04be14f870311aa55afedddaf307f382 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111485

Malicious code in magellan-cross-env-fornax-firebase npm...

EUVD-2025-113625

Malicious code in firebase-antares-gulp-elektra npm...

EUVD-2025-124552

Malicious code in neptune-morgan-firebase-aquarius npm...

EUVD-2025-121059

Malicious code in uglify-js-child-process-meissa-firebase npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-113618

Malicious code in firebase-docusaurus-soap-fork npm...

EUVD-2025-121954

Malicious code in sirius-readable-centaurus-firebase npm...

EUVD-2025-124602

Malicious code in nconf-firebase-async-mongodb npm...

Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142517 Malicious code in firebase-tethys-lacerta-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69d5ff0f33b8c4e3d791473618cc4821b1a690ac34b74c6f64375aa339435f93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141657 Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48320ffdb95d1b543c27168dccd5a5eb028beb17f1215e1de83ec2140b407d20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124487

Malicious code in nightmare-envconfig-nestjs-firebase npm...