EUVD-2025-122002

Malicious code in shelljs-mongodb-eridanus-gemini npm...

EUVD-2025-115996

Malicious code in bootstrap-gemini-carpo-registry npm...

Malicious code in envconfig-nconf-magellan-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea277790b8fe234a34902417fcb515d38b383e722e56e1480996b8af1e9c197d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124440

Malicious code in nightwatch-postgres-forever-gemini npm...

EUVD-2025-113196

Malicious code in gemini-rest-framework-quasar npm...

Malicious code in bulma-halley-gemini-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93ee5c5bdfa023d9e60148efa3bd49c6f1b6dc9220ac4b6a1312aa3d62533882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113212

Malicious code in gemini-indus-chai-public npm...

EUVD-2025-121034

Malicious code in ultra-gemini-elara-update npm...

Malicious code in ultra-gemini-elara-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f1826034a534b444fe5c322a889eacae769fc5f1bc3335f37e8e0a0239945c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121979

Malicious code in sirius-development-gemini-graphql npm...

EUVD-2025-114112

Malicious code in eleventy-global-gemini-ursa npm...

EUVD-2025-122922

Malicious code in quito-phoebe-gemini-astro npm...

EUVD-2025-115281

Malicious code in cluster-gemini-jekyll-semantic-ui npm...

EUVD-2025-120098

Malicious code in yonder-commitlint-config-angular-nightmare-gemini npm...

EUVD-2025-124460

Malicious code in nightwatch-css-loader-charon-gemini npm...

EUVD-2025-114082

Malicious code in enceladus-gemini-xml-sails npm...

Malicious code in gemini-postcss-loader-quantum-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 025ab4f53ac3540ff0cd2eb7fbe2d4c11d635f63020d4195a445991a4c7d4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141074 Malicious code in convict-gemini-quark-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1105a5512cdb4ea28cb806f26bc05f275144f73d19090426faa14c19edd2fa63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...