EUVD-2025-113196

Malicious code in gemini-rest-framework-quasar npm...

EUVD-2025-111914

Malicious code in koa-pipe-dorado-adonis npm...

EUVD-2025-113421

Malicious code in framework-public-redis-test npm...

EUVD-2025-122597

Malicious code in resolvers-framework-framework-markdown npm...

EUVD-2025-113540

Malicious code in forever-phoebe-framework-cz-conventional-changelog npm...

Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113419

Malicious code in framework-react-bootstrap-alphard-supervisor npm...

Malicious code in framework-astro-library-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef35db8d4a04cadcdd6e1d033c10b92183e380161dd5773465e45152621bf70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116470

Malicious code in async-oberon-framework-ursa npm...

EUVD-2025-113016

Malicious code in grus-nodejs-framework-typeorm npm...

EUVD-2025-120475

Malicious code in wezen-framework-dotenv-safe-testcafe npm...

EUVD-2025-113420

Malicious code in framework-quasar-spawn-commitlint-config-angular npm...

EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

EUVD-2025-120580

Malicious code in webdriver-mocha-grus-zenobia-sass-loader npm...

Malicious code in cors-framework-promise-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c08b47433d07003e13f2c30807743c8b152d09fb9ce52429e162877aedcc69d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112117

Malicious code in jsonp-framework-izar-update npm...

MAL-2025-144078 Malicious code in jwt-leda-framework-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bb4f8cb8d4f557c3034d71e7ecaf0ff765c06e1a8805438ce959a7d22ca3637 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141519 Malicious code in delphinus-io-aldebaran-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d821ef98f08a1c0be384e1163096d7db814e10ae4f42e0e576ae0d3a45c7e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144549 Malicious code in loopback-framework-loopback-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a7b27e27c7246783d05331bd95e459820ecd9975b3cb5f76e1d50febbf6d07d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...