Malicious code in firebase-leda-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115104

Malicious code in concurrently-firebase-remark-postcss-loader npm...

Malicious code in firebase-equinox-subscription-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86eb7bcb8fb5b305c8955a209837823b518246f954d7f8092b05bf6df8cb27e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112380

Malicious code in iota-nestjs-firebase-rest npm...

Malicious code in mensa-apollo-firebase-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3e0231c97d5ad71e53184aa2327549e5ad41ea6fbe8a1fb8617a327ce0f28aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113605

Malicious code in firebase-optimize-css-assets-webpack-plugin-csv-superagent npm...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

EUVD-2025-113613

Malicious code in firebase-frontend-apollo-perseus npm...

EUVD-2025-113866

Malicious code in eslint-plugin-thuban-firebase-centauri npm...

EUVD-2025-122258

Malicious code in sass-loader-cors-forever-firebase npm...

EUVD-2025-113612

Malicious code in firebase-google-castor-standard npm...

EUVD-2025-120066

Malicious code in zenobia-elara-mongoose-firebase npm...

EUVD-2025-113607

Malicious code in firebase-middleware-websockets-husky npm...

Malicious code in vuepress-rest-firebase-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46d96054190a7de9344d8f480eb9efd89f962f1ecb598bf536198426daca3994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112272

Malicious code in janus-wezen-firebase-xanthus npm...

EUVD-2025-111970

Malicious code in kaus-firebase-jabbah-bellatrix npm...

EUVD-2025-124175

Malicious code in oberon-firebase-tailwindcss-procyon npm...

MAL-2025-141180 Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142499 Malicious code in firebase-google-castor-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1c35d855c4037261cc0e67a28f5041d8ad7486426f5f63b1215b4d1954ca699 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142169 Malicious code in eris-duplex-firebase-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915b388b7f76911b853fb6047f3e4f4e11e927e0aa88842e90a0790a39b30f5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...