EUVD-2025-121249

Malicious code in titan-fork-centaurus-fornax npm...

MAL-2025-149501 Malicious code in winston-javascript-fork-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c31d8ef523f64895d99cdf3b37549e07b7ff03de07b73488c2b778f8569fd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122077

Malicious code in semantic-ui-fork-development-jest npm...

MAL-2025-142597 Malicious code in fork-sedna-nightwatch-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b890777daf258afd20e0fc21e1e0f98e4209fcca3ae4ef83e1a7f8c437ecdfa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113523

Malicious code in fork-gulp-bellatrix-semantic-release npm...

EUVD-2025-111629

Malicious code in local-fork-postgres-html-webpack-plugin npm...

MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113526

Malicious code in fork-duplex-request-triton npm...

MAL-2025-142582 Malicious code in fork-cordelia-gacrux-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5df5ef2b61b37688c2f55bd46a28cf1c268628a6e43f3c21b47bcd8b8596d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142092 Malicious code in epimetheus-cors-rate-limiter-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14a36585cb0e9470e30f7a4cd1bc052fa0639c93ff28925fce131a00d3a5f4d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120287

Malicious code in xenon-fork-levels-docusaurus npm...

EUVD-2025-112625

Malicious code in hyperion-materialize-nodemon-fork npm...

EUVD-2025-112549

Malicious code in indus-fork-rimraf-forever npm...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in convict-fork-pyxis-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5812c5fca60d1dc97f84b0717487cf140262af29cecb3162e85e2553eadcf919 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-nightmare-superagent-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20270a1be781484d6ac981fddbb01a36fb6292d347aac034ab283733ddc5dec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-foundation-enceladus-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f8401d11f4b6874b1999bdf3f2ec8220a510a0e127d7d11a1535ebc1f3395e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-less-loader-stream-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65f983e20b23c6c3ea63bfec0d0eb328ca07ecf008967e2c5e765651916732d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-writable-miranda-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2c06e94df0ee3bbe0de2fafb23ce4891a4357d3007dc2d8241ab688d448ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...