MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143119 Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140979 Malicious code in commitlint-enif-pegasus-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c272bc0ff476d7d02b5023202fd9c3128fc3140648d0c21d3c5517fa9fdf7724 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121970

Malicious code in sirius-gulp-playwright-jovian npm...

EUVD-2025-112999

Malicious code in gulp-celeste-celeste-dorado npm...

EUVD-2025-113625

Malicious code in firebase-antares-gulp-elektra npm...

Malicious code in tethys-gulp-bootstrap-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121308

Malicious code in tethys-gulp-bootstrap-colors npm...

EUVD-2025-121737

Malicious code in spinner-commitlint-wezen-gulp npm...

EUVD-2025-123495

Malicious code in postcss-xanthus-gulp-subscription npm...

EUVD-2025-121041

Malicious code in ultra-auriga-gulp-gulp npm...

Malicious code in upgrade-csv-gulp-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4a880b2792a6069fa0026a9e74e70b5b41dc7ae0ada9b9067a2c3c1dc94156f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139211 Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-markdown-pdf-gulp-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c270190fb82c3f6cb1ae2215fb4e05a1af89fc5963a7cd63c37138ac749fc92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114795

Malicious code in css-loader-relay-element-ui-gulp npm...

EUVD-2025-112988

Malicious code in gulp-redis-request-meissa npm...

EUVD-2025-112986

Malicious code in gulp-xanadu-terser-prompts npm...

EUVD-2025-116689

Malicious code in antares-gulp-apex-spinner npm...

Malicious code in galaxy-gulp-socketio-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5145d9682743031b8b7616fe119454d6603e023db328a3b4a5a52e7f22c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...