EUVD-2025-123495

Malicious code in postcss-xanthus-gulp-subscription npm...

EUVD-2025-115129

Malicious code in commitlint-enif-pegasus-gulp npm...

Malicious code in gulp-mensa-izar-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75fb3ccefc8bcbdcfb2e4436dd2f9ac85c0abd3f44fc280455f24a5c155ef18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112999

Malicious code in gulp-celeste-celeste-dorado npm...

Malicious code in centaurus-scripts-gulp-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27023d9210002e8a159d274507e19749d15b77741058b139d23b3f39f719fa99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143117 Malicious code in gulp-json-buffer-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60f5c127955b6f819a7c29832a75f751a7060b856d48eeca69ce552869a8fd0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116102

Malicious code in betelgeuse-registry-spawn-gulp npm...

EUVD-2025-115466

Malicious code in chalk-gulp-helmet-andromeda npm...

EUVD-2025-115411

Malicious code in chariklo-gulp-sync-child-process npm...

EUVD-2025-114519

Malicious code in dependencies-xerxes-gulp-equinox npm...

MAL-2025-139211 Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115493

Malicious code in chakra-ui-gatsby-terser-webpack-plugin-gulp npm...

Malicious code in hugo-cassini-gulp-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0cb35f2bb29d0c1fd0f9a34a1c8da3a37d641f3a35dd31b92417b2bb7f8b02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121981

Malicious code in sirius-cressida-gulp-subscription npm...

Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in celeste-gulp-quito-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e95a706d8fcb139fc6c13e9cb35d3a15d976bd763cd46ba60ce9024625e4a61e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113133

Malicious code in got-gulp-docusaurus-geckodriver npm...

EUVD-2025-114257

Malicious code in eclipse-gulp-terser-inquirer npm...

EUVD-2025-122910

Malicious code in radiant-comet-module-gulp npm...