Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121780

Malicious code in spectron-webdriver-unuk-eridanus-ini npm...

EUVD-2025-112511

Malicious code in ini-query-bellatrix-quark npm...

EUVD-2025-112502

Malicious code in ini-wasat-react-bootstrap-javascript npm...

EUVD-2025-111431

Malicious code in markdown-morgan-aether-ini npm...

MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114689

Malicious code in cz-conventional-changelog-ini-equinox-enif npm...

EUVD-2025-111674

Malicious code in lint-ini-carpo-aldebaran npm...

MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142379 Malicious code in express-ini-soap-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49eae2ca0c7684bc542e8a3126f14f9e1a4ab907103a7c6013ca9cd73841ec41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149211 Malicious code in vuetify-ini-framework-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd1ea7eeee9dc7efb74efdee65854ad1c7cafd35be5c51a28e7a4f8938efa4b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143591 Malicious code in ini-forever-foundation-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 276bf94003b7622e515f3e0a9f9a371f2d64a3f3045c39359a4cb9e0343543a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-112526

Malicious code in ini-draco-frontend-quark npm...

EUVD-2025-115239

Malicious code in comet-callback-eridanus-ini npm...

EUVD-2025-124115

Malicious code in ophiuchus-await-ini-got npm...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143598 Malicious code in ini-polaris-levels-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b6dbc7245de0f6cf4378d92b3378c6253e0975faa4c370b06975f43e67a388f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143610 Malicious code in ini-vuetify-test-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be5d587a84d0e961ff412a526515fd88cceea5cffce76773278d75a3fa00347 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143836 Malicious code in janus-slidev-typeorm-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81622a3bfb68436593cee4550ccd8873459ebb5f4d186618fbb90391442fab9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...