Malicious code in fusion-flare-mensa-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67cb283c5e1df3af407d2bf58256597fec083f923747006d84c54fb6f2b16d8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113370

Malicious code in fusion-non-blocking-hugo-commitlint npm...

EUVD-2025-123535

Malicious code in postcss-deimos-express-fusion npm...

EUVD-2025-113380

Malicious code in fusion-flare-mensa-enceladus npm...

EUVD-2025-114061

Malicious code in enif-fusion-chariklo-chai npm...

Malicious code in fusion-geckodriver-server-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 958176f41f08e2a4e088ec62423745c59475d2e9e76c5efe48941dde7761aa9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121651

Malicious code in start-levels-fusion-pipe npm...

EUVD-2025-112688

Malicious code in husky-polaris-fusion-development npm...

Malicious code in xanadu-octans-rest-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b133c07f9f0f4feff669de21e38816ebc2fb81c0079455765ce01e12647c159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120327

Malicious code in xanadu-octans-rest-fusion npm...

EUVD-2025-113382

Malicious code in fusion-dione-winston-hyperion npm...

EUVD-2025-113949

Malicious code in eris-auth-fusion-nodemon npm...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142730 Malicious code in fusion-dione-winston-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c5e61aabca555ae18a36ee02637cdd4e9d92b8a5eb75162cec5819dda4332fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142725 Malicious code in fusion-cache-nightwatch-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e621eb24b99727465fefb65412655e97619b9b87c2400a9d7bbea63db7163d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146766 Malicious code in public-postcss-loader-nconf-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc8486c705b8b7152ab39cebfac6f20436a00b56f90d0140031aca814832186d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ceres-fusion-socketio-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7105ca67c5b8aedcc54f1b0cf18f9cfd0d84ee3f95d357d759668152e07dfce2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145641 Malicious code in norma-fusion-corvus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ca828881dbff58f18a3c8203b8840ef7d72a798a101a9ae7b5d77c4a3f5ade This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144789 Malicious code in meissa-antares-fusion-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d81c4da62b1c17ee051658905962a867ff8c8ff75447d11c00b068b5e7e932a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142746 Malicious code in fusion-restart-koa-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1780b515b5dd9b790fad828a8f9fa7156196bc7166d320a62ce6341d0f4169ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...