EUVD-2025-120588

Malicious code in webdriver-mocha-avior-phoebe-hapi npm...

Malicious code in hapi-commitizen-update-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46b26b06dc60a7b6a8944c637b6cdbf741968df7c18314dee31911816cc31f46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113988

Malicious code in equinox-hapi-perseus-nodemon npm...

EUVD-2025-112926

Malicious code in hapi-jovian-hugo-umbriel npm...

Malicious code in betelgeuse-hapi-dynamo-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41a35da202899a19f4d2770c7c1cd9956c0a0b82316c6be52a6712a1fbfb1568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112918

Malicious code in hapi-phenomic-cors-nebula npm...

Malicious code in lyra-hapi-airbnb-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c65055bd97dcce6cc8bccd65bf096b6499772061ed4af24b831f79df372a16f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-markdown-dotenv-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3293fb2ca9b432971d77bf3217d2e02ba442d2f5f05ff47e51ef92b2ca63b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112924

Malicious code in hapi-lyra-europa-convict npm...

Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-sirius-commitlint-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5bba1e8688eb4ecf682073f2e20d6832d25b7acebe1f8a59e848fc460540dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-miranda-changelog-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66180cc95ece5af12d457fd622a3af203c17b90bb2ac5a47ecca155fc5308be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120774

Malicious code in virgo-gacrux-geckodriver-hapi npm...

MAL-2025-140981 Malicious code in commitlint-event-hapi-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2c7e4542e0c1b82a096fb6fede5659820f6472f2fa073cce4034c27f936ac04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143195 Malicious code in hapi-pm2-event-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859efae1d683341cf881810b9ed0373769cb7268a4055824235d2a45b7903f21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142157 Malicious code in eridanus-typeorm-pino-pretty-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0683bde0e21dbe5cb71e19dbaf130bb75c894f9d3a49978baa10d1b94699c683 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143780 Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112931

Malicious code in hapi-csv-zenobia-xanadu npm...

Malicious code in hapi-dynamo-janus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...