EUVD-2025-112615

Malicious code in hyperion-rollup-plugin-loop-testcafe npm...

EUVD-2025-120601

Malicious code in webdriver-manager-nashira-loop-izar npm...

Malicious code in perseus-loop-equinox-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c15455fc23e56cc25186b74d796a66dc7b8c99617e33a2e861abadcb052f49a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122834

Malicious code in readable-pino-loop-nightwatch npm...

EUVD-2025-113340

Malicious code in gacrux-loop-mira-electron npm...

EUVD-2025-123700

Malicious code in pino-loop-relay-xml npm...

MAL-2025-142348 Malicious code in exec-koa-andromeda-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecbff9e6221e3538f5d32ce051aee8f04ba057b18ba87e9f1a0f51ab9d9c0a15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143462 Malicious code in hydra-xanadu-yildun-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e30439631813838d2dae6e16f87c201553d891ebe00fda0bd7ed7391701e4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143346 Malicious code in hexo-mocha-carpo-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28d5f20c394984fce4284f9db4adeacf96ffc5d765f98c1d2a7e82d68f5c2597 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149769 Malicious code in yakutsk-got-antares-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ce06be0821d032561661c0c9238657114ecb684b348a6e7cd326f717af19730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142772 Malicious code in gacrux-loop-mira-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8504735f7c1860b4b37f147f2c23fa6eb65656ec17bcfacb50d61c6f446fe73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144537 Malicious code in loop-virgo-impulse-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6f7baa439a7ef55154ee9b9254ab2728fa7346ccf937a84ab806d616b5b3e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147320 Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147850 Malicious code in semantic-ui-kaus-install-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db6ed7182c80f2bff1213f3c1d1b6395ba3709bf4901536c388e34b08b53060 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144210 Malicious code in koa-xml-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b103aeecc1ae931a947c8a9794fc0e86a300ca5a75eed27352559f2e337ce941 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140253 Malicious code in bunyan-quark-loop-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe676a6d3e7e3665526bef653839a527974f4af6ce865b9901c31d442682f32b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144813 Malicious code in meissa-loop-uglify-js-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc70419186bba0567af101a8404bb7c268c8f934572df8d12845a5ebc1301ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140703 Malicious code in chariklo-mini-css-extract-plugin-rollup-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4885d904321f1e54289c15c6b9924e8d678610816b44065f535762c4433516f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...