EUVD-2025-122974

Malicious code in quasar-firebase-fornax-eslint-config npm...

EUVD-2025-122796

Malicious code in registry-firebase-command-sync npm...

EUVD-2025-113865

Malicious code in eslint-plugin-tool-rest-firebase npm...

EUVD-2025-112445

Malicious code in install-bellatrix-firebase-webpack npm...

EUVD-2025-121059

Malicious code in uglify-js-child-process-meissa-firebase npm...

EUVD-2025-116518

Malicious code in ariel-cosmos-arcturus-firebase npm...

EUVD-2025-122795

Malicious code in registry-firebase-less-loader-subscription npm...

EUVD-2025-113611

Malicious code in firebase-io-webdriverio-react-bootstrap npm...

EUVD-2025-121508

Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin npm...

EUVD-2025-120795

Malicious code in version-firebase-yildun-terser-webpack-plugin npm...

EUVD-2025-113621

Malicious code in firebase-cluster-readable-chakra-ui npm...

EUVD-2025-120756

Malicious code in virgo-vega-zephyr-firebase npm...

EUVD-2025-113617

Malicious code in firebase-dotenv-jekyll-jovian npm...

MAL-2025-146079 Malicious code in perseus-cosmiconfig-firebase-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e221b7d2beb77b6059c0e71a9fb1f02ee2fdfa97680094407cb6f1af94797df1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149595 Malicious code in xanadu-firebase-hydra-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2968e2c1db958009855484fb18365bced939dabc426a4aebb39c634a70f67dac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142509 Malicious code in firebase-prompts-ophiuchus-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd762064fe507b2ea3c8881ea3d2ed43a20683cebadab4ebd9480060fda0a087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149199 Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...