EUVD-2025-112014

Malicious code in karma-delphinus-materialize-dotenv-safe npm...

Malicious code in capella-materialize-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 828f4c6f5942d153f057f566c75da70af3062e70779dddf44195eea130f5f177 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111370

Malicious code in materialize-lint-staged-supervisor-astro npm...

EUVD-2025-111363

Malicious code in materialize-regulus-apollo-writable npm...

EUVD-2025-112625

Malicious code in hyperion-materialize-nodemon-fork npm...

EUVD-2025-113742

Malicious code in express-barnard-materialize-framework npm...

EUVD-2025-122293

Malicious code in sagitta-webpack-karma-materialize npm...

MAL-2025-147781 Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

MAL-2025-145340 Malicious code in nebula-duplex-nightwatch-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6412c4f262852e7f97b4bcd32fb6dc1aefd960c6630d40137b33a576d3e4010a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144750 Malicious code in materialize-postcss-triton-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e806cad24fc90b3611ebe78f4acf26d974be1fca9b6f1a37555a0267101d4ea9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144753 Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142202 Malicious code in eslint-config-materialize-adonis-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59baa87091f03af93dc192d05b76ada4672396aca266ac78ba95b64bfd3a5401 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144731 Malicious code in markdownlint-start-materialize-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5b86e7289af41e3713ee478fd25844f6004df8c4ad8c5ecdc276dcd607a7588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111362

Malicious code in materialize-rocket-standard-nestjs npm...

MAL-2025-142791 Malicious code in galaxy-materialize-morgan-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01266a13930e2fd4fb31b7403bd93427563c148b3eeb6de69a97234b2cc97101 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146358 Malicious code in polaris-phoebe-materialize-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77c740aa11ca859bb2f0ff0e894580beec61fa56684a200b3bf75cf08ef3ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144129 Malicious code in kastra-pyxis-materialize-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50efa6b14b4153be771f26ea3685b03159c5bb0e95dab062461c4e6da40efce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...