EUVD-2025-112510

Malicious code in ini-rehype-norma-weywot npm...

EUVD-2025-115437

Malicious code in changelog-hydra-hugo-ini npm...

EUVD-2025-121780

Malicious code in spectron-webdriver-unuk-eridanus-ini npm...

EUVD-2025-122675

Malicious code in remark-ini-cosmos-spica npm...

EUVD-2025-112517

Malicious code in ini-passport-quito-mongoose npm...

EUVD-2025-114288

Malicious code in duplex-vuepress-ini-nightwatch npm...

EUVD-2025-112511

Malicious code in ini-query-bellatrix-quark npm...

EUVD-2025-112507

Malicious code in ini-rollup-plugin-gulp-semantic-ui npm...

MAL-2025-141622 Malicious code in development-ini-start-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4617475d964864836f5e94abaf991f558e3dedca1e65661637a22c5cb9e884be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-middleware-build-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2246fe3ca33b8fcca8464aa54b16b62c8bb88ab3d1ac8125772343cdea2de33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116374

Malicious code in auth-non-blocking-ini-middleware npm...

Malicious code in cygnus-ini-duplex-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57b52fe76d9e5026fde08f9e1d6eb70e48547f0d6ff62a3d66b10fce1d7024f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116891

Malicious code in adonis-gulp-ini-soap npm...

EUVD-2025-120205

Malicious code in xerxes-yaml-ini-redis npm...

EUVD-2025-113586

Malicious code in flare-gridsome-sirius-ini npm...

MAL-2025-143461 Malicious code in hydra-wasat-venus-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a87524dc2b3f47f519c9c541a7e56e09938c109a8cd0a59016f3ba3f8273a7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140983 Malicious code in commitlint-exec-webdriver-manager-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a29c972093ebe62f0e65806d1b9a7bbb36b4ced01737a961f52681337efd871 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143589 Malicious code in ini-event-carpo-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c12eea2d4ba6b8fc138699eb3d77d15d7ce2efb1865fc23f50fd7f44fb052686 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...