EUVD-2025-120305

Malicious code in xanthus-hapi-buffer-dione npm...

Malicious code in equinox-hapi-perseus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea6af33309828591b4f0021f47515a44f03e081a901c22c87a79055f4fc38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123646

Malicious code in playwright-chakra-ui-ora-hapi npm...

EUVD-2025-112929

Malicious code in hapi-hyperion-corvus-upgrade npm...

EUVD-2025-115451

Malicious code in chalk-sirius-commitlint-hapi npm...

EUVD-2025-113151

Malicious code in google-inquirer-hapi-metalsmith npm...

EUVD-2025-112930

Malicious code in hapi-dynamo-janus-altair npm...

MAL-2025-139499 Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143443 Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142122 Malicious code in equinox-hapi-perseus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea6af33309828591b4f0021f47515a44f03e081a901c22c87a79055f4fc38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143194 Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145783 Malicious code in octans-ultra-hapi-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2f2be72f028c1bd41566d4c6dffafff9cfd064e1de5c737a3dcc95aaebf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116119

Malicious code in betelgeuse-hapi-dynamo-scripts npm...

Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124377

Malicious code in node-sass-iota-hapi-bulma npm...

EUVD-2025-112922

Malicious code in hapi-meteor-chromedriver-karma npm...

EUVD-2025-123498

Malicious code in postcss-start-hapi-hexo npm...

Malicious code in hapi-pm2-event-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...