MAL-2025-143777 Malicious code in jabbah-foundation-auth-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fff1c97910c4a0a152cc3a17478ed0e622af9e547e7e11a92d3795e6aad004b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111205

Malicious code in meteor-foundation-callback-grus npm...

EUVD-2025-111264

Malicious code in mensa-foundation-apex-dione npm...

EUVD-2025-120697

Malicious code in vulcan-exec-foundation-gridsome npm...

Malicious code in helmet-vuetify-testcafe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fde004c7eeff62dd2bd915a13abce378eabb2e6082629961777a086edebb2580 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113446

Malicious code in foundation-antares-yaml-vega npm...

EUVD-2025-113738

Malicious code in express-docusaurus-phoebe-foundation npm...

Malicious code in ceres-cressida-lacerta-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5782a627057146e68a55be11e14e87622c4c6bd1c1a888751f2495c2f61a78cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121642

Malicious code in start-sync-foundation-init npm...

EUVD-2025-122998

Malicious code in quark-foundation-astro-install npm...

EUVD-2025-121973

Malicious code in sirius-foundation-sagitta-eslint npm...

Malicious code in dagda-resolvers-express-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02a92d36a069c5febb5db84af1665e4412342f0c0fd6ffc310f5b08d0b7e1753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116775

Malicious code in alphard-indus-nconf-foundation npm...

EUVD-2025-120290

Malicious code in xenon-ariel-foundation-bootstrap npm...

EUVD-2025-113443

Malicious code in foundation-canopus-charon-adonis npm...

EUVD-2025-120874

Malicious code in ursa-electron-builder-helmet-foundation npm...

EUVD-2025-122659

Malicious code in repository-dotenv-parse-variables-foundation-websockets npm...

Malicious code in dactyl-foundation-deneb-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c702b6dd34c82f1f31c9bb8c48269dab9e7a0d5f55905e6e7726ee273f67b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146924 Malicious code in quark-foundation-astro-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a52b3b80862080168727e51f66b36697ffc73536a3113103e04eae783caf4cb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...