EUVD-2025-112922

Malicious code in hapi-meteor-chromedriver-karma npm...

Malicious code in uninstall-xanadu-weywot-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0122afbf15a68b758872c3dc1ec2719a1f3f0ac718b484d440bc721e31346f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111419

Malicious code in markdown-pdf-mongoose-hapi-janus npm...

Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112923

Malicious code in hapi-markdown-dotenv-spinner npm...

EUVD-2025-121809

Malicious code in spectron-ignite-arcturus-hapi npm...

MAL-2025-145783 Malicious code in octans-ultra-hapi-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0a2f2be72f028c1bd41566d4c6dffafff9cfd064e1de5c737a3dcc95aaebf2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113429

Malicious code in framework-hapi-sequelize-jovian npm...

EUVD-2025-112837

Malicious code in hercules-command-spawn-hapi npm...

EUVD-2025-123646

Malicious code in playwright-chakra-ui-ora-hapi npm...

MAL-2025-139499 Malicious code in apollo-colors-hapi-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30be78f711f92871cf9ef17406d921ae42feb235c2054887bde10f6c7e489426 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123157

Malicious code in public-passport-event-hapi npm...

EUVD-2025-116119

Malicious code in betelgeuse-hapi-dynamo-scripts npm...

EUVD-2025-112929

Malicious code in hapi-hyperion-corvus-upgrade npm...

Malicious code in hapi-link-dotenv-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7aff41ffcc47a9ce5cecc9896e60e7457b7563c695aa7759fd139e79d5032c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143189 Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142122 Malicious code in equinox-hapi-perseus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea6af33309828591b4f0021f47515a44f03e081a901c22c87a79055f4fc38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143194 Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143443 Malicious code in hydra-hapi-webdriver-manager-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00a03bac90d0287512c2d43ae5069080023ec831c3459544aa0a7b576751eb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145544 Malicious code in node-sass-iota-hapi-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91dbc27182aee5bfd31b5146e3edf1d1a806c781e33de5ed7183df2ea72cdd82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...