EUVD-2025-121864

Malicious code in socketio-proxima-ini-venus npm...

EUVD-2025-114858

Malicious code in cross-env-dactyl-regulus-ini npm...

Malicious code in cygnus-ini-duplex-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b52fe76d9e5026fde08f9e1d6eb70e48547f0d6ff62a3d66b10fce1d7024f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-rigel-framework-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122348

Malicious code in sadr-process-ini-sync npm...

EUVD-2025-121723

Malicious code in spinner-meteor-cross-env-ini npm...

Malicious code in ini-lynx-triton-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aad36a83db4c18f6d235decadf06c6c601b0f3aa88ea21b13a2cc6f1809ea172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111305

Malicious code in meissa-ini-zenith-zenobia npm...

Malicious code in ini-puppeteer-sirius-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f165079f96f534969d007a41855a4d7f2ed41baf135f410520c0d13780012190 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122455

Malicious code in rocket-graphql-ini-ini npm...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-115239

Malicious code in comet-callback-eridanus-ini npm...

EUVD-2025-124115

Malicious code in ophiuchus-await-ini-got npm...

EUVD-2025-115816

Malicious code in cache-xo-ini-wolf npm...

EUVD-2025-116070

Malicious code in blaze-reveal-md-auriga-ini npm...

EUVD-2025-112501

Malicious code in ini-xenos-stream-webdriverio npm...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...