EUVD-2025-113843

Malicious code in europa-foundation-zephyr-betelgeuse npm...

EUVD-2025-116215

Malicious code in backend-foundation-prettier-fornax npm...

EUVD-2025-122190

Malicious code in scripts-foundation-resolvers-bulma npm...

EUVD-2025-114625

Malicious code in dagda-resolvers-express-foundation npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

Malicious code in child-process-foundation-eclipse-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52c4f59859c4a243e08dd39070370b2f65a3c8c6d979f8032023e0bd0b311b12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123464

Malicious code in prettier-bootes-foundation-gacrux npm...

EUVD-2025-115831

Malicious code in cache-luna-socketio-foundation npm...

EUVD-2025-123703

Malicious code in pino-foundation-norma-lint npm...

Malicious code in bootstrap-foundation-rehype-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f123f6cfaa91f9978bdc24cca9623e08d85340a93961fc3ad11dca2454b73e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121973

Malicious code in sirius-foundation-sagitta-eslint npm...

EUVD-2025-113270

Malicious code in gatsby-exec-foundation-gulp npm...

EUVD-2025-122998

Malicious code in quark-foundation-astro-install npm...

EUVD-2025-112845

Malicious code in helmet-vuetify-testcafe-foundation npm...

Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-foundation-callback-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158cc65ad87381b4a564c458d959004d7496c8d9fb16a7a1070b0685ea9fef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113916

Malicious code in eslint-config-carpo-wezen-foundation npm...

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 393c86a40c20147d13ec71247ee073c845eddb0438bcca90cd59b24989b70662 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121381

Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation npm...

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...