MAL-2025-142569 Malicious code in forever-init-hermes-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116928

Malicious code in acamar-gulp-forever-solis npm...

EUVD-2025-123187

Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin npm...

EUVD-2025-116807

Malicious code in algol-forever-regulus-miranda npm...

EUVD-2025-120288

Malicious code in xenon-build-server-forever npm...

EUVD-2025-115812

Malicious code in callback-apollo-forever-html-webpack-plugin npm...

EUVD-2025-112829

Malicious code in hercules-forever-commitlint-publish npm...

EUVD-2025-113534

Malicious code in forever-webpack-toml-rest npm...

EUVD-2025-111567

Malicious code in loopback-forever-polaris-middleware npm...

EUVD-2025-113548

Malicious code in forever-bootes-betelgeuse-bunyan npm...

Malicious code in remark-astro-forever-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c858389f05b16e2689bf68d37a15e90ea748e2604af180f27de3c2e5205aad5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-forever-eslint-config-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e474f0bb15ac64d99eb8c5656bc4569ae5da7d444d529a7f2b083f234245dfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113540

Malicious code in forever-phoebe-framework-cz-conventional-changelog npm...

Malicious code in forever-phoebe-framework-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59a52a262bdae65b6e905fb0373e0ed131f6cfa80de9df825df7c8e829f50809 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-init-hermes-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114846

Malicious code in cross-env-parcel-forever-perseus npm...

EUVD-2025-113539

Malicious code in forever-proxima-node-config-leda npm...

EUVD-2025-114063

Malicious code in enif-forever-auth0-atlas npm...

EUVD-2025-121428

Malicious code in telesto-readable-forever-winston npm...

Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...