MAL-2025-142712 Malicious code in frontend-nuxtjs-configstore-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed224f2d4c4313c0bad8649b36a558e5a593b3dbbab706401a7a9e60a6208de5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142266 Malicious code in europa-enif-frontend-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5d1cbb11bd1538059fd754625642c6b3a833aad1d0337b86d54315327f193a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142249 Malicious code in eslint-spinner-websockets-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0421cfb15af5d20fdbc70a7059ec4d30d9af7d641823e418cd674af5d3f60b4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113404

Malicious code in frontend-meissa-scripts-charon npm...

MAL-2025-139789 Malicious code in avior-upgrade-frontend-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b82629c5437f4b0d4c89ab021f789b978e879e95e377e702e4c55f994b4e888e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145709 Malicious code in nuxtjs-perseus-frontend-callisto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c44ddb54da7f022b1b6f280a4dd839cc0ae8b15a6102fdd27314d0308c08085b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143442 Malicious code in hydra-frontend-testcafe-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1a9d5ac6a8f78a91341338dcf450760dfae65194d9d62eefb8b885ef7ded353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144655 Malicious code in magellan-pavo-loopback-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c98a09c1d172ad9eb72a14167600f9052a467ab7ce122e23fba068359491f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146232 Malicious code in pino-pretty-frontend-sqlite-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5637c1e972a444b0b66f8940c38cba7129ec9beaba986b3ea79bf0ca0495491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143696 Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142701 Malicious code in frontend-chakra-ui-standard-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520d1091a873c4269619f99e8e6a1a7b3b45d36e1ade66d7ba940a0be49c292 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142715 Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112287

Malicious code in janus-phoebe-frontend-configstore npm...

EUVD-2025-113844

Malicious code in europa-enif-frontend-mutation npm...

EUVD-2025-113397

Malicious code in frontend-pulsar-nuxtjs-request npm...

MAL-2025-140250 Malicious code in bunyan-nightwatch-frontend-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825844c3a75d5cdd409cd4763e9f2f4de5198bab30c1a6ef5ea1929885f6f599 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111424

Malicious code in markdown-pdf-frontend-rimraf-start npm...

Malicious code in buffer-betelgeuse-frontend-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c0ef4b2d71dd1d93e43bc2f987e0a94230df746070093c4bf07678a38085182 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-draco-frontend-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...