MAL-2025-148469 Malicious code in taurus-install-eslint-plugin-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112332

Malicious code in jabbah-leda-install-eslint-config npm...

MAL-2025-143687 Malicious code in install-testcafe-quark-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4974a01ca69fac48c452e695ebc3893a9ca2b8964f0b67369be05735fc7101e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143396 Malicious code in hugo-prompts-install-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e323f5bb8d985d0dc02ff975746ce4d5f88126d9da820e1d55eb820e3a144653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112428

Malicious code in install-semantic-ui-warp-fork npm...

EUVD-2025-114537

Malicious code in dependencies-lacerta-hermes-install npm...

EUVD-2025-112439

Malicious code in install-eclipse-supervisor-markdown-pdf npm...

EUVD-2025-121286

Malicious code in thuban-backend-install-wolf npm...

EUVD-2025-122465

Malicious code in rimraf-pegasus-blaze-install npm...

EUVD-2025-123903

Malicious code in pegasus-backend-event-install npm...

EUVD-2025-116021

Malicious code in bootes-install-impulse-phenomic npm...

MAL-2025-139723 Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120481

Malicious code in weywot-xanadu-yaml-install npm...

EUVD-2025-123388

Malicious code in private-install-radiant-version npm...

EUVD-2025-115699

Malicious code in carina-draco-install-convict npm...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123018

Malicious code in quantum-install-puppeteer-link npm...

EUVD-2025-114764

Malicious code in csv-kastra-install-winston npm...

MAL-2025-147457 Malicious code in rimraf-pegasus-blaze-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65013a25305c06788d4bd511b1ba06e797528dce411fd77dba655986b5ca4b61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...