EUVD-2025-115813

Malicious code in callback-antd-transport-install npm...

EUVD-2025-112445

Malicious code in install-bellatrix-firebase-webpack npm...

Malicious code in sedna-leda-virgo-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678811bc3418cea8107e8a9fe3f77efb20d7b071be856ea9696257f6c00d563a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113150

Malicious code in google-install-octans-webpack npm...

EUVD-2025-116379

Malicious code in auth-install-express-prompts npm...

EUVD-2025-111522

Malicious code in lynx-install-nightmare-private npm...

EUVD-2025-111153

Malicious code in middleware-nashira-install-loglevel npm...

MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143690 Malicious code in install-uninstall-mira-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7e84c856cd0e9886740c1235d889f235ed09f42e79e4b38c5ce76c4e8b49ec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141473 Malicious code in dagda-install-global-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b312c96b134e33169689e7078f37ab23390dbb17c7e278ee6a0d2054c08074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111562

Malicious code in loopback-install-cosmos-juno npm...

Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143689 Malicious code in install-uninstall-eridanus-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55a783a109f2ecd48aebe6cfed3f14cd877e84d3a42b39daae06e048a0c8599f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121194

Malicious code in tool-fornax-polaris-install npm...

MAL-2025-148469 Malicious code in taurus-install-eslint-plugin-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140552 Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139723 Malicious code in auth-install-express-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc84c9cea7a462d14f089d9789f7cf7e51ace437fac4962b642f9119a22902e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146904 Malicious code in quantum-install-puppeteer-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724acaff6d5a6ae464eb4bc6952dd230597cc047db7f7a926acc4906c1510a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...