EUVD-2025-122174

Malicious code in scripts-sequelize-init-publish npm...

EUVD-2025-123164

Malicious code in public-eslint-plugin-blitz-init npm...

EUVD-2025-123068

Malicious code in puppeteer-init-eclipse-quantum npm...

EUVD-2025-124740

Malicious code in morgan-init-auth0-rollup npm...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

EUVD-2025-124131

Malicious code in odin-carpo-init-altair npm...

EUVD-2025-124091

Malicious code in ophiuchus-nconf-init-relay npm...

EUVD-2025-123340

Malicious code in procyon-chakra-ui-comet-init npm...

EUVD-2025-123408

Malicious code in prettier-stylelint-odin-hexo-init npm...

EUVD-2025-112890

Malicious code in heka-webpack-init-prompts npm...

EUVD-2025-113891

Malicious code in eslint-gatsby-init-express npm...

EUVD-2025-115358

Malicious code in child-process-init-winston-frontend npm...

Malicious code in procyon-chakra-ui-comet-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b714a9f6285ba1b2dd437b87474dc7b762e38cfcf30a34ac0c236b9fa33d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143632 Malicious code in init-subscription-callisto-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9394c2bac5a142593132709358a31dad622842e119d03316c93ad3dbbabad6a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143633 Malicious code in init-titan-rollup-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcca8d6c574797e2e2e679ad497bd80547d1a272b15b1e582052f42f82f871c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147250 Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124191

Malicious code in oauth-farout-corvus-init npm...

MAL-2025-143629 Malicious code in init-postcss-markdown-pdf-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abb21342977b56cd234645325128ec729005574ce297f5bbaf05e55b64a5fd91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140487 Malicious code in castor-leda-init-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d1e61eb88822973087b0503c6c945e9cff5c7871fd776b41eeb9b423b647460 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...