EUVD-2025-120545

Malicious code in webdriverio-supervisor-ignite-puppeteer npm...

EUVD-2025-112597

Malicious code in ignite-izar-hyperion-gatsby npm...

Malicious code in fornax-react-bootstrap-phoenix-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19fd1f7f3c597a5a98d0f02b38ae7147c321a5db0e4ed178cf4dc828ff939ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-private-cosmos-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2641d8590183b42285b0d38cbd94317dc3626768661335897e9cb724db6daeba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112602

Malicious code in ignite-commitlint-config-angular-iota-corvus npm...

Malicious code in rehype-eris-algol-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfa52e77988c744b88131fd41aa547759e2c6ce9957fddcc2632329184357735 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114395

Malicious code in dotenv-parse-variables-cosmiconfig-ignite-eris npm...

Malicious code in geckodriver-jabbah-ignite-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4507051c332a729b6cc8aa5e646269609ee1d1a86c0e98c10de96f5fb7770530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ignite-request-bulma-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 463b70ae50836606d8f7111e2255bee627a2deb42fe5e78ce2b7ab7e3885285c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-scorpius-ignite-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1ef700f7d6a2075e1da4dbf66fee58b1e0dc67dbe69aa622fa2019ecbd4b2e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112585

Malicious code in ignite-sqlite-celeste-sass-loader npm...

Malicious code in karma-pipe-leda-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737a5e0e5e3b86f535e6d2720d1b3848b751f4c3cadf9db24437aa6bfeadaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in equinox-xerxes-convict-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc8a218e391950bb7e213b36959360050fc42140f58484814757055dd9ca5a3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113244

Malicious code in geckodriver-jabbah-ignite-xo npm...

EUVD-2025-111847

Malicious code in leda-docusaurus-dactyl-ignite npm...

EUVD-2025-122819

Malicious code in redis-ignite-browserify-atlas npm...

EUVD-2025-113767

Malicious code in exec-ignite-hermes-process npm...

EUVD-2025-112603

Malicious code in ignite-ceres-element-ui-rollup npm...

Malicious code in regulus-geckodriver-apollo-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86803956b94c8ff513b4ef9bea65fe82c6737e4b0244a4e7a7456162559bd4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-repository-ignite-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae54010ef3eed19bcf96488eff384a8b20c5631c658cf381d8e92f2484cdaff7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...