EUVD-2025-114288

Malicious code in duplex-vuepress-ini-nightwatch npm...

EUVD-2025-111604

Malicious code in loglevel-ini-puppeteer-lyra npm...

EUVD-2025-111309

Malicious code in meissa-fornax-ini-loglevel npm...

EUVD-2025-112528

Malicious code in ini-cypress-celeste-pegasus npm...

EUVD-2025-112514

Malicious code in ini-pulsar-cross-env-quantum npm...

Malicious code in ini-middleware-build-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112508

Malicious code in ini-rigel-framework-helmet npm...

Malicious code in ini-draco-frontend-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a9e64174e135c44aee880ca64de4b7d5765cb2dd9c6917bf4f952af0c5820e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143606 Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b9860e43f28b0ece8e3c8d36b595e5eee206c686e720066e2a8d028415cf4327 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-chalk-cors-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e056bc82713174866f848920d37b5631378c0586896ed08ae0f33e06e27aaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114241

Malicious code in elara-centauri-ini-draco npm...

EUVD-2025-112523

Malicious code in ini-event-dependencies-umbriel npm...

EUVD-2025-121221

Malicious code in toml-cross-env-private-ini npm...

EUVD-2025-112516

Malicious code in ini-playwright-kaus-weywot npm...

EUVD-2025-113194

Malicious code in gemini-server-ini-sagitta npm...

EUVD-2025-112501

Malicious code in ini-xenos-stream-webdriverio npm...

EUVD-2025-112384

Malicious code in iota-jasmine-ini-lyra npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...