EUVD-2025-112185

Malicious code in jest-mdx-aurora-scorpius npm...

MAL-2025-143268 Malicious code in helmet-zenobia-jest-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8318772a9d81784738fd36d28c00cf1665ab566d585377a4d5f4987dadde5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148098 Malicious code in spawn-io-cosmiconfig-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e6b201351a9a51dd4418072852271e69f95ab27e86b442ea8598d9ae40f2b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145824 Malicious code in ophiuchus-jest-update-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49c5507f525f0b7c13e0a023ac4998e1cb4cbbd33c5ed1721695fa1b08ce51c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143540 Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6359550cf21a9089d3967a3f38250315ffaede55aaf39f38d500f308b7058829 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143919 Malicious code in jest-corvus-prettier-plugin-markdown-charon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7f8a207732818d652c646d15170f2d870f89c960977bc4b478e309eca2f1422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145471 Malicious code in nightwatch-jest-titan-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961d992da9b77d8408adac794f1d6fd09c398667d2f55022e2fc616b6c8e5c30 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113138

Malicious code in got-antares-jest-adonis npm...

EUVD-2025-115661

Malicious code in carpo-jest-celeste-blaze npm...

EUVD-2025-112190

Malicious code in jest-flare-less-cli npm...

Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124450

Malicious code in nightwatch-jest-titan-mongoose npm...

Malicious code in sass-loader-corvus-kastra-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 23f118cb79bf026a1e89581f7c116843c889e90b5bda96cc3d0b56a412403b9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145567 Malicious code in nodejs-hydra-jest-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9932132f6d9bafb954b656330727089d6eb11d9a744fe3333e8dd7384105b5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141068 Malicious code in configstore-xenon-promise-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 531649ee99419507b8cc2fa55207d2d7bc6a4b7209778bf70a24fdd8fc5b8430 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146953 Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142051 Malicious code in enif-jest-loglevel-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62edf57c8e73260b139612b3a0dc1a3afaf7ece9e89c6141f32b134fff4ea4eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bunyan-jest-barnard-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf484fb8927502be255e02a27f23deb90239512fb1c86a4f001ca21cb55810f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...