Malicious code in nestjs-fork-draco-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c955d990db2c8b50291158cda63b6a0c64616f530042044ca39f552cee4010 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in electron-fork-mira-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1cfca6cb2c335fe1f49ef9979402387599d2e54f4a5c4a3ffdaf8a61f577746 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122077

Malicious code in semantic-ui-fork-development-jest npm...

EUVD-2025-113690

Malicious code in farout-nightmare-superagent-fork npm...

EUVD-2025-120720

Malicious code in vuetify-fork-xml-cache npm...

EUVD-2025-113514

Malicious code in fork-semantic-ui-version-transform npm...

EUVD-2025-121732

Malicious code in spinner-enif-spica-fork npm...

MAL-2025-142597 Malicious code in fork-sedna-nightwatch-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b890777daf258afd20e0fc21e1e0f98e4209fcca3ae4ef83e1a7f8c437ecdfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142585 Malicious code in fork-deneb-markdownlint-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba93b7930e02ad6837f30249a13d5e8d223ae7bce1c99c7df9c99223d8c22ae6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149209 Malicious code in vuetify-fork-xml-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 683777ffb6a0d2d4ffc0e742ec2bbcc49d9709fcb03df1612896d9e53e07165c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113531

Malicious code in fork-carpo-xenos-element-ui npm...

Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113513

Malicious code in fork-spectron-dependencies-stop npm...

MAL-2025-142595 Malicious code in fork-publish-node-config-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2f6e9a7562a333d4e73524c50d96a1a156c6d0d860a6af6a4cad3f0ea51e112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142092 Malicious code in epimetheus-cors-rate-limiter-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a36585cb0e9470e30f7a4cd1bc052fa0639c93ff28925fce131a00d3a5f4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149644 Malicious code in xenon-fork-levels-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89814b0b9aaa2fe6cd27e600a8b89c88ca97ce6c6130c4af46a9e19ebcde5ce1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142637 Malicious code in fornax-metalsmith-fork-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e5b8e68461ff828257fd3b73d19f935cbd1d9b9033b8aea6b327f49d220c42 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142592 Malicious code in fork-less-loader-stream-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-191702 Malicious code in chromifypro (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4138883ad2e38b4a8a4353918126f4732db5f04107be0bddafc745ec97120b52 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...