EUVD-2025-180161

Malicious code in babel-init-changelog-algol npm...

EUVD-2025-179264

Malicious code in dotenv-parse-variables-init-child-process-genomics npm...

MAL-2025-186618 Malicious code in dotenv-parse-variables-init-child-process-genomics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98640b4344bddcf7df3cfc9d3664fa0d315971b9d3d25520d63786b5a4be8e0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178405

Malicious code in init-optimize-css-assets-webpack-plugin-nodejs-grus npm...

Malicious code in nebula-init-resolvers-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175899

Malicious code in transhumanism-release-it-neptune-init npm...

EUVD-2025-179797

Malicious code in chai-tachyon-init-procyon npm...

EUVD-2025-179636

Malicious code in commitlint-chalk-eclipse-init npm...

MAL-2025-187474 Malicious code in init-charon-terser-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3508eca342f082f4e63f5a94b88316894ac60ba0b8e0ac588455e64488807bcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189431 Malicious code in selenium-halley-algol-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ed0d72aa17ef547016ffb572562b5c34e11e0379d30a6ddc9cdd64cc716793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178404

Malicious code in init-parcel-run-script-hugo npm...

EUVD-2025-179236

Malicious code in duplex-init-parcel-test npm...

EUVD-2025-175719

Malicious code in virgo-build-equinox-init npm...

MAL-2025-187476 Malicious code in init-mui-exobiology-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6b089f10bcf82fa23f2555418a43efe946ac1262086b0dacff0389c00fdc79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188206 Malicious code in nebula-init-resolvers-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176444

Malicious code in selenium-halley-algol-init npm...

EUVD-2025-176463

Malicious code in sedna-jest-init-delphinus npm...

Malicious code in chai-tachyon-init-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed315af8a331086cb9308963e3aa3757b94f48135134c69ba78a509e8ac3494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in commitlint-chalk-eclipse-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b08cb43ec4ac2e4a214da7f273798b819d8970ac0a947c0225b6f9a4d62c83b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186085 Malicious code in chai-tachyon-init-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed315af8a331086cb9308963e3aa3757b94f48135134c69ba78a509e8ac3494 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...