Malicious code in eris-chalk-kaus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90adeb8f738082faa8a3feb2275ba022c13d51ef8f71a33c1232ee80fe25f44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-miranda-element-ui-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478640b4176788ec26ab2af3eaf3a84218eefd1aacee687df057a7012d20be8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-rimraf-orbit-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da8dbdb8fb598ace85ab132ab2e8e249b3b8f37c34607f4a50808f231b4d761e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115111

Malicious code in commitlint-xerxes-deimos-adonis npm...

Malicious code in wezen-soap-grus-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c969ec135ea0e9b782b9b6c0dec74f9cd771881a5044ff40e24e14d193616bbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-phoebe-spectron-webdriver-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62f2df56849161afef0e61b35720a8f08f6de55bf2423f2fd6a6c56a34555cd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-node-config-antares-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae2c8da07ae20da8b6e8ebb222294ddec9a48db903489a63c5a274d038252f3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-dotenv-safe-wasat-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ccf289cbd205a33d2d44a901a7c9891a58d1e2ea2e6bcbdfbbeecc2e82fd0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superagent-nightwatch-got-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54e9aec448506ac282ea13c172e7921e650b5cd3001c93cb67df38d502291a05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in corvus-enceladus-lint-staged-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae1829f498555d59bca2416201d75d19048908b4c7785ebcd0735c275c15140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f156f21864fd5b1dc51c70fb2bd714c8d2745fd6f37bd8a9eed2f326714484f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114399

Malicious code in dotenv-parse-variables-cache-halley-commitlint-config-angular npm...

Malicious code in nightwatch-elektra-impulse-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2eb8e6510ea2b0fe73a9d801e439dec04f4efc6545ba6b27f35e11ed2a826e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122113

Malicious code in selenium-registry-capella-mira npm...

Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-jwt-sails-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deb006c2b2793dbbcbe5f7a7f5b52c5850abecd1b69042e481b38dc15078b81b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in acamar-update-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb4db31769e06077155f89e26bad96142790087e079fa0db3fef030b6085eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-bunyan-cygnus-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e2e41abf9245703a734f0eec2e691c89b7d67a1ef3f53628e3b404f88f4d43 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...