EUVD-2025-113614

Malicious code in firebase-equinox-subscription-configstore npm...

EUVD-2025-114452

Malicious code in docusaurus-cosmiconfig-fomalhaut-firebase npm...

EUVD-2025-113625

Malicious code in firebase-antares-gulp-elektra npm...

EUVD-2025-124383

Malicious code in node-sass-firebase-enceladus-loopback npm...

Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124672

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin npm...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113600

Malicious code in firebase-rigel-fornax-ini npm...

EUVD-2025-122930

Malicious code in quito-firebase-supervisor-spinner npm...

EUVD-2025-124176

Malicious code in oberon-firebase-jupiter-winston npm...

EUVD-2025-124599

Malicious code in nconf-jekyll-firebase-prettier npm...

Malicious code in firebase-io-webdriverio-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e905a337a5a8d66d4416fd0b63bf9a60bd94e7bf2c351c452500768ec80639ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124552

Malicious code in neptune-morgan-firebase-aquarius npm...

EUVD-2025-113620

Malicious code in firebase-cordelia-ignite-cosmiconfig npm...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121400

Malicious code in terser-meissa-firebase-lyra npm...

EUVD-2025-123446

Malicious code in prettier-plugin-markdown-auth0-firebase-yildun npm...

EUVD-2025-124602

Malicious code in nconf-firebase-async-mongodb npm...

EUVD-2025-113623

Malicious code in firebase-bootstrap-xenon-mira npm...

MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...