EUVD-2025-111996

Malicious code in karma-prettier-slidev-forever npm...

EUVD-2025-113492

Malicious code in fornax-fomalhaut-forever-ursa npm...

EUVD-2025-115601

Malicious code in celeste-forever-bootstrap-hexo npm...

Malicious code in nightwatch-postgres-forever-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721b5af0dbe9dec968beee5e2b0a96aad969806791083ca6d0be1ea401c9c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113536

Malicious code in forever-tool-achernar-bellatrix npm...

EUVD-2025-111312

Malicious code in meissa-europa-forever-helios npm...

EUVD-2025-115505

Malicious code in chai-procyon-postcss-loader-forever npm...

EUVD-2025-122866

Malicious code in react-bootstrap-element-ui-gatsby-forever npm...

Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112522

Malicious code in ini-forever-foundation-framework npm...

Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113552

Malicious code in forever-apollo-oauth-async npm...

EUVD-2025-116375

Malicious code in auth-nightwatch-grunt-forever npm...

EUVD-2025-114633

Malicious code in dagda-magellan-cosmiconfig-forever npm...

Malicious code in ini-lynx-triton-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad36a83db4c18f6d235decadf06c6c601b0f3aa88ea21b13a2cc6f1809ea172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123906

Malicious code in pavo-zenobia-forever-run-script npm...

EUVD-2025-123893

Malicious code in pegasus-forever-jwt-cache npm...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142569 Malicious code in forever-init-hermes-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144831 Malicious code in meissa-rate-limiter-materialize-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac82d38d94d108399abb187b10b9085c15e5ffd3c1ca4b655b4777880b1a1c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...