EUVD-2025-113714

Malicious code in express-xanadu-husky-lint-staged npm...

EUVD-2025-112793

Malicious code in hermes-publish-husky-ultra npm...

EUVD-2025-120618

Malicious code in webdriver-manager-cassini-husky-apex npm...

EUVD-2025-113665

Malicious code in fetch-husky-europa-redis npm...

Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112696

Malicious code in husky-figures-bellatrix-chai npm...

Malicious code in husky-xml-dagda-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ee168c20fdd786ce490576e77ab42a5f0f5a285a2cb3b5a2bdda2d5906509c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112682

Malicious code in husky-upgrade-soap-jekyll npm...

Malicious code in uglify-js-nestjs-fornax-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f836626a36dad3ac3a3576de198188f321dcd3c9875be1920bea36dab436d7ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115234

Malicious code in comet-event-husky-typeorm npm...

EUVD-2025-121507

Malicious code in sync-deimos-cache-husky npm...

EUVD-2025-114733

Malicious code in cygnus-pm2-husky-loglevel npm...

EUVD-2025-121333

Malicious code in testcafe-husky-betelgeuse-hermes npm...

EUVD-2025-121903

Malicious code in soap-husky-playwright-rate-limiter npm...

EUVD-2025-111919

Malicious code in koa-husky-indus-europa npm...

EUVD-2025-112680

Malicious code in husky-xml-dagda-redis npm...

MAL-2025-143415 Malicious code in husky-element-ui-rest-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72e267c7ffdbac3e4225e8420bd262444e2671ef1ee693768e182ede4033de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-husky-europa-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec5ebb87d9beb9b2b0237447f6fb1b337d45c7d61ac2ef391f2e1546be1a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142504 Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144223 Malicious code in kronos-odin-husky-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a22743875e5744cc8a70917be29c9b2a3057d3afec2c9f87c65bd78d07c960d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...