EUVD-2025-115939

Malicious code in buffer-nuxtjs-webdriverio-standard npm...

EUVD-2025-114391

Malicious code in dotenv-parse-variables-dotenv-safe-algol-framework npm...

EUVD-2025-121786

Malicious code in spectron-webdriver-reveal-md-enif-jasmine npm...

EUVD-2025-112798

Malicious code in hermes-development-browserify-framework npm...

EUVD-2025-124385

Malicious code in node-sass-eleventy-framework-postcss-loader npm...

MAL-2025-142630 Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-link-framework-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad198d91229350f652e4ae102f70d8e7ce49ce27bdf04e26787e9a03c241f11d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146949 Malicious code in quasar-framework-superagent-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccdd639f51defd668b7f6948d0f440c9f2a0d4f64fb0987703f3cdc9251fc2b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147164 Malicious code in rehype-cordelia-framework-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6b689160e4581ea532cb8229eedfe2bc5bdfad888df29d6e500d0aaa36077a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147325 Malicious code in resolvers-framework-framework-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d5331ec8be49c488adbc37898d658d8db3263db341533698ed3fddf47b50ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140773 Malicious code in chromedriver-framework-private-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 88d375d7091322fdaae73b2a3edbe7c96c32587195cf1297018f3f6329e3853b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113429

Malicious code in framework-hapi-sequelize-jovian npm...

MAL-2025-142685 Malicious code in framework-magellan-mocha-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134d8b8ad0a608d770da2b282ea99ddaa6fcb5459a7eea6743382b9852548bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148997 Malicious code in update-halley-framework-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93af06f81c75fbc0de18cb68694150a651d06a441fa764dad8958c5a0bc7436 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142687 Malicious code in framework-mysql-regulus-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4713f90c44e813de6e1ae468be5e23ecf7228066c5cb246888f727377943d601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149554 Malicious code in wolf-ophiuchus-eslint-config-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70067f59028c148db888ac9fc27d2a76217a56f8ecedee3af5f4f81c07c29e13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142692 Malicious code in framework-quasar-spawn-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdf3c1ced05681da6b00f91ff5765d1da4c60751cf4ae4ef9f608e00d15fc266 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...