EUVD-2025-113722

Malicious code in express-non-blocking-radiant-fork npm...

EUVD-2025-124494

Malicious code in nextjs-xml-yaml-fork npm...

Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123649

Malicious code in playwright-achernar-fork-quantum npm...

Malicious code in fork-foundation-enceladus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8401d11f4b6874b1999bdf3f2ec8220a510a0e127d7d11a1535ebc1f3395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114195

Malicious code in electron-fork-mira-yakutsk npm...

EUVD-2025-123292

Malicious code in procyon-zephyr-gacrux-fork npm...

EUVD-2025-113532

Malicious code in fork-carpo-commitlint-gulp npm...

EUVD-2025-123781

Malicious code in phenomic-webdriver-mocha-eclipse-fork npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

Malicious code in fork-writable-miranda-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2c06e94df0ee3bbe0de2fafb23ce4891a4357d3007dc2d8241ab688d448ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122794

Malicious code in registry-fork-terser-webpack-plugin-rollup npm...

EUVD-2025-113533

Malicious code in fork-betelgeuse-levels-pavo npm...

EUVD-2025-111372

Malicious code in materialize-fork-redis-react-bootstrap npm...

Malicious code in fornax-metalsmith-fork-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5b8e68461ff828257fd3b73d19f935cbd1d9b9033b8aea6b327f49d220c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124209

Malicious code in nuxtjs-redis-fork-mutation npm...

EUVD-2025-116057

Malicious code in blitz-fork-umbra-toml npm...

EUVD-2025-124648

Malicious code in nashira-config-fork-cli npm...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...