MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145469 Malicious code in nightwatch-gulp-rest-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 327fab4954a2a66876cb99b184626eee80b3bd5d099d27ccbf42a0ea7cb4cdf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122910

Malicious code in radiant-comet-module-gulp npm...

EUVD-2025-121117

Malicious code in triton-convict-yakutsk-gulp npm...

EUVD-2025-113270

Malicious code in gatsby-exec-foundation-gulp npm...

EUVD-2025-122712

Malicious code in relay-sedna-gulp-altair npm...

EUVD-2025-112997

Malicious code in gulp-command-luna-zephyr npm...

EUVD-2025-112996

Malicious code in gulp-iota-sass-loader-cygnus npm...

EUVD-2025-113002

Malicious code in gulp-await-antares-apex npm...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147955 Malicious code in sirius-gulp-playwright-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c521360de0b0ca3d58c926ad007a3d8f6528de76ca5395d2ffb8fc67ee2b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120366

Malicious code in wolf-tailwindcss-gulp-docusaurus npm...

MAL-2025-143114 Malicious code in gulp-cluster-chalk-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68d6adcdba26daeeb1c108de5db41a2f44f387d2a858d78207f3204892fc6cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145080 Malicious code in mocha-gulp-cordelia-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a395ae24f7d0c1eadb39257cc219205772046202a800ef8390ac3a07011e0a1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140696 Malicious code in chariklo-gulp-sync-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8da4da04f9f6c5b6991dcb2017d11ee5925ffc8c98afb5519309453f5c30e25c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121981

Malicious code in sirius-cressida-gulp-subscription npm...

Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112994

Malicious code in gulp-mensa-izar-changelog npm...

MAL-2025-49156 Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...

Malicious code in epic-gulp-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c052f7f555ae651081d7524dbab57753500980d2ef82c6e29da03fe49997ef2 The package epic-gulp-utils was found to contain malicious code...