MAL-2025-147587 Malicious code in sagitta-child-process-zenith-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c8ac52cf3de98dfb5eb57f3316ceac412304ef84753e297e90dc52e087dc974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122513

Malicious code in reveal-md-fork-rehype-yakutsk npm...

EUVD-2025-114305

Malicious code in duplex-browserify-magellan-fork npm...

EUVD-2025-123217

Malicious code in proxima-antares-fork-pino-pretty npm...

EUVD-2025-121733

Malicious code in spinner-dione-fork-hercules npm...

EUVD-2025-113618

Malicious code in firebase-docusaurus-soap-fork npm...

EUVD-2025-123292

Malicious code in procyon-zephyr-gacrux-fork npm...

Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113475

Malicious code in fornax-metalsmith-fork-hydra npm...

EUVD-2025-123649

Malicious code in playwright-achernar-fork-quantum npm...

EUVD-2025-113529

Malicious code in fork-css-loader-halley-markdown-pdf npm...

EUVD-2025-113699

Malicious code in farout-fork-aldebaran-capella npm...

EUVD-2025-113511

Malicious code in fork-update-stop-pegasus npm...

Malicious code in farout-nightmare-superagent-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20270a1be781484d6ac981fddbb01a36fb6292d347aac034ab283733ddc5dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121249

Malicious code in titan-fork-centaurus-fornax npm...

Malicious code in fork-vega-kaus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75e7e3ab2e551d64f307ad5edc6b7efbe70b2b77c5666c59cbdd9ac9e67d50b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111629

Malicious code in local-fork-postgres-html-webpack-plugin npm...

EUVD-2025-120287

Malicious code in xenon-fork-levels-docusaurus npm...