EUVD-2025-113410

Malicious code in frontend-epimetheus-flare-lynx npm...

EUVD-2025-113402

Malicious code in frontend-module-tailwindcss-sails npm...

EUVD-2025-111479

Malicious code in magellan-frontend-loopback-cypress npm...

EUVD-2025-113924

Malicious code in eris-yildun-readable-frontend npm...

EUVD-2025-120037

Malicious code in zephyr-semantic-ui-mysql-frontend npm...

EUVD-2025-113412

Malicious code in frontend-carpo-yaml-hyperion npm...

EUVD-2025-113406

Malicious code in frontend-jupiter-writable-dagda npm...

EUVD-2025-124814

Malicious code in module-frontend-toml-tool npm...

Malicious code in miranda-frontend-luna-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f55817a1ac24be0c51e3cd4c4e8c579be5d62c9c64c9f10d6f6aa7ac1f47060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124427

Malicious code in nightwatch-ursa-triton-frontend npm...

EUVD-2025-120639

Malicious code in wasat-forever-frontend-reveal-md npm...

EUVD-2025-114192

Malicious code in electron-frontend-polaris-aquarius npm...

EUVD-2025-113414

Malicious code in frontend-betelgeuse-restart-orbit npm...

EUVD-2025-113396

Malicious code in frontend-quark-antares-nova npm...

MAL-2025-142708 Malicious code in frontend-meissa-scripts-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b7993005ccd89c0204660a1eabf207f62018f8177e86a80e44ab904f81bd861 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149895 Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143259 Malicious code in helmet-postgres-semantic-ui-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1806fa3dd985b486547323fc55566005a0acd0adf10474256d4e0bf9909d94f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139906 Malicious code in barnard-frontend-airbnb-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8339c9cd9d0b4161213a33a73d83df39141d50d2f1ab4160e0efd9edc755a254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146125 Malicious code in perseus-yakutsk-frontend-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a641fbc17006d8fdb7b548a76d3ebf7bfb0f5cc7aafc94582bd05a5f53074e8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...