Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113446

Malicious code in foundation-antares-yaml-vega npm...

EUVD-2025-120874

Malicious code in ursa-electron-builder-helmet-foundation npm...

EUVD-2025-116752

Malicious code in altair-dependencies-foundation-rate-limiter npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

EUVD-2025-115618

Malicious code in castor-nashira-grunt-foundation npm...

MAL-2025-145539 Malicious code in node-sass-foundation-helios-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2aa148084f3aa7bdcf939f75d7ed0963f845ceea2b4be00e210a62320dee30ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142673 Malicious code in foundation-sync-jwt-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0763efc2d7e662922249fb41abf295d83acb6a6eeaac78e28e2930207857b575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147612 Malicious code in sagitta-publish-npm-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28c7fc955c277c3de9a6cc9a4bbef4982f2f62079dcec8f17b305ed1db8ba22b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112599

Malicious code in ignite-foundation-cluster-spinner npm...

EUVD-2025-114216

Malicious code in electron-bellatrix-foundation-tailwindcss npm...

EUVD-2025-113447

Malicious code in foundation-aether-fornax-duplex npm...

EUVD-2025-113448

Malicious code in foundation-adonis-duplex-bootstrap npm...

EUVD-2025-111863

Malicious code in lacerta-rest-mocha-foundation npm...

EUVD-2025-111264

Malicious code in mensa-foundation-apex-dione npm...

EUVD-2025-122940

Malicious code in query-ultra-foundation-link npm...

MAL-2025-146924 Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143777 Malicious code in jabbah-foundation-auth-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fff1c97910c4a0a152cc3a17478ed0e622af9e547e7e11a92d3795e6aad004b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...