MAL-2025-144459 Malicious code in lint-staged-library-fork-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599e178fbd7b06563cee8ffa42611bd250dbf206a67592c620ac211ef0d23d4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147950 Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142590 Malicious code in fork-helmet-telesto-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7679ea7ca27cc8b5ba3c2132e37b1bc1dbea0f92c14cdb6fcb9ce04322da927b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147408 Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d25496969ba6f5cfa6a577fec4881ee98ade2aa99f41eb8e9d304e1c8971161 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141908 Malicious code in electron-builder-mensa-capella-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c324de26b9b9044a959f6ee90bfbb74d52d4f086add21d9857bac277be23aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142582 Malicious code in fork-cordelia-gacrux-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5df5ef2b61b37688c2f55bd46a28cf1c268628a6e43f3c21b47bcd8b8596d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149501 Malicious code in winston-javascript-fork-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142589 Malicious code in fork-gulp-bellatrix-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6373b65f6de2f3650a7c758c470a6c57c3364116da0f1ed56b7c095fbcdc50c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149825 Malicious code in yildun-vuetify-fork-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 368ed533673888e54c66221181fd64ec8dc89a8f4b0172d01172e1acc14a28b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121733

Malicious code in spinner-dione-fork-hercules npm...

EUVD-2025-116533

Malicious code in arcturus-fork-cassini-jwt npm...

EUVD-2025-114325

Malicious code in dotenv-solis-hydra-fork npm...

Malicious code in gatsby-fork-soap-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b73e7a65de6af65020a1c45f76329317657d4f7569beaffbfa56f0471cd8adbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115578

Malicious code in centauri-enceladus-fork-perseus npm...

EUVD-2025-116849

Malicious code in airbnb-fork-mutation-fusion npm...

EUVD-2025-113530

Malicious code in fork-cordelia-gacrux-titan npm...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122514

Malicious code in reveal-md-fomalhaut-prettier-plugin-markdown-fork npm...

EUVD-2025-112695

Malicious code in husky-fork-child-process-flare npm...

Malicious code in farout-nightmare-superagent-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20270a1be781484d6ac981fddbb01a36fb6292d347aac034ab283733ddc5dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...