EUVD-2025-111773

Malicious code in less-nconf-global-hapi npm...

EUVD-2025-111675

Malicious code in lint-hapi-stop-nightwatch npm...

EUVD-2025-111506

Malicious code in lyra-hapi-airbnb-protractor npm...

EUVD-2025-111419

Malicious code in markdown-pdf-mongoose-hapi-janus npm...

EUVD-2025-111235

Malicious code in metalsmith-janus-solis-hapi npm...

EUVD-2025-111127

Malicious code in mini-css-extract-plugin-postcss-hapi-protractor npm...

EUVD-2025-112630

Malicious code in hyperion-jsonp-rimraf-hapi npm...

EUVD-2025-112333

Malicious code in jabbah-hapi-eslint-config-centauri npm...

EUVD-2025-111968

Malicious code in kaus-hapi-css-loader-polaris npm...

EUVD-2025-111820

Malicious code in leda-scorpius-hapi-pino-pretty npm...

Malicious code in airbnb-colors-sync-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7fc7d0428c018b9d34e73281aa3acd0df3ba2771cef2f568249f03b9b919a9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-odin-radiant-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b018c3c576a12e91b1414b540a920cf4d9a62aa4d6901c07ab7ef1b75bd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-hapi-dynamo-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-sirius-commitlint-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bba1e8688eb4ecf682073f2e20d6832d25b7acebe1f8a59e848fc460540dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-event-hapi-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c7e4542e0c1b82a096fb6fede5659820f6472f2fa073cce4034c27f936ac04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-hapi-perseus-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ea6af33309828591b4f0021f47515a44f03e081a901c22c87a79055f4fc38b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-superagent-javascript-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9b794550053245b66618b7061c10440b97b535bc4dad030d638689510877234 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7e7e91d4a997d8e612394d189efa0a0befcc5026cc5b99a3fe32f91a842b1a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...