EUVD-2025-124405

Malicious code in node-config-non-blocking-meissa-middleware npm...

EUVD-2025-123696

Malicious code in pino-middleware-zephyr-auth0 npm...

Malicious code in procyon-wolf-middleware-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4b4bf30966429dc013b6a8c5fbf7f2bd149e3f37da0518784c5d4f6d5e13747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115295

Malicious code in cli-ursa-lyra-middleware npm...

EUVD-2025-111154

Malicious code in middleware-mongodb-leda-barnard npm...

EUVD-2025-111466

Malicious code in magellan-middleware-protractor-postcss-loader npm...

Malicious code in juno-sync-middleware-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5262c9aa5283b0187448f086b75b73d09c9b6329b9468931b0f2d7e353f198f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111289

Malicious code in meissa-pm2-middleware-socketio npm...

EUVD-2025-115886

Malicious code in bulma-middleware-procyon-buffer npm...

EUVD-2025-111157

Malicious code in middleware-jasmine-nightwatch-fornax npm...

Malicious code in middleware-dorado-arcturus-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f989b710e537fc775ad4d9598cd5612ba8e23149980fb376951978a776fda01b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122901

Malicious code in radiant-proxima-kastra-middleware npm...

EUVD-2025-116329

Malicious code in avior-leda-cordelia-middleware npm...

MAL-2025-144963 Malicious code in middleware-postcss-loader-vulcan-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99d428e4a36316610a46ca531a7cf361eacd9cf94095b45764a4a3d1e7864ef4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140218 Malicious code in bulma-middleware-procyon-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2da90094f5a03de39c5fd357369364e0b32f35ff16c2eb61f23441b9e23f3d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139773 Malicious code in avior-leda-cordelia-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ebc3dafe421376c8a68b4f99a070c82d6b07785161a4d708ff483c04935e82 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146663 Malicious code in prompts-elara-neptune-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e88763e4db6d89db36b23e397b116aa485ef8cc5797796b29504d0df8bdf70c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142951 Malicious code in global-toml-vuepress-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a8cdb722e96e67d2348f504d26379d9b7b8862df3266e39cbf1756954a7aa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146573 Malicious code in process-titan-mira-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79408ce54f9c53733daf659f97806d17e40693999ddfac0665977b04ae1c8558 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142788 Malicious code in galaxy-csv-middleware-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 265a90c0ed8d48568ce28902e224b77e7b8d7911333c8d1ab524cabdb671285f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...