MAL-2025-185925 Malicious code in build-eleventy-deneb-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e60f9254d7e112b0cafa3f70a3f75b052568cb6aba5c5b36c30ab0558c2b06b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188190 Malicious code in nconf-gemini-webdriver-mocha-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e8722c814d02682ad652c04b378d4dc3c4eb3d425cc1f427ccd04011bbea9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178738

Malicious code in gemini-sagitta-cordelia-aether npm...

EUVD-2025-179957

Malicious code in build-eleventy-deneb-gemini npm...

EUVD-2025-111545

Malicious code in loopback-weywot-style-loader-gemini npm...

EUVD-2025-114754

Malicious code in csv-quantum-gemini-meteor npm...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

EUVD-2025-114097

Malicious code in eleventy-spinner-gemini-framework npm...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123835

Malicious code in perseus-figures-gemini-quito npm...

EUVD-2025-113217

Malicious code in gemini-despina-polaris-async npm...

EUVD-2025-113195

Malicious code in gemini-sedna-postgres-proxima npm...

EUVD-2025-113192

Malicious code in gemini-wolf-subscription-adonis npm...

EUVD-2025-113221

Malicious code in gemini-arcturus-ursa-sass-loader npm...

EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122497

Malicious code in reveal-md-query-gemini-europa npm...

EUVD-2025-115890

Malicious code in bulma-halley-gemini-less-loader npm...

EUVD-2025-114715

Malicious code in cypress-chakra-ui-umbriel-gemini npm...

EUVD-2025-113220

Malicious code in gemini-build-regulus-airbnb npm...