EUVD-2025-116031

Malicious code in bootes-betelgeuse-forever-xml npm...

EUVD-2025-120894

Malicious code in upgrade-telesto-forever-webdriver-mocha npm...

EUVD-2025-113922

Malicious code in eslint-carina-forever-hermes npm...

EUVD-2025-112666

Malicious code in hydra-magellan-forever-astro npm...

MAL-2025-140071 Malicious code in bootes-betelgeuse-forever-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f642659a1b6ce09ff66cc79760e53f20dc42e315da65407b73126e5b9842d69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111895

Malicious code in kronos-gridsome-eslint-plugin-forever npm...

MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147927 Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145074 Malicious code in mocha-eris-spectron-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efc9e761073af4b945f488bcf38fcfe267283030cd5f0c9994ecbc03975fbd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142565 Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9deb2f56cf0ee4b3e376a18166ca56a9018309a961160ec32f622f8bc6b661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142534 Malicious code in flare-solis-forever-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 163f0f30131fe8dcbc8359f924b1869fe9f66ef40dd4a8b7fbe0364431cfb5a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121452

Malicious code in taurus-phenomic-forever-loglevel npm...

EUVD-2025-113542

Malicious code in forever-lint-carina-readable npm...

EUVD-2025-114062

Malicious code in enif-forever-materialize-resolvers npm...

EUVD-2025-113545

Malicious code in forever-fetch-flare-farout npm...

Malicious code in dagda-forever-proxima-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a695226dc0058df094f2a9e0bbd11960f1e6da96d66c47fa2c8d9bf1578fd334 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

EUVD-2025-113547

Malicious code in forever-configstore-markdownlint-webdriver-mocha npm...

Malicious code in commitizen-forever-kronos-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa3e877871f76ba9e3d244d01fe8c0120005de9d90b3980e73de642d4dfc890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...