EUVD-2025-122246

Malicious code in sass-loader-mongodb-elara-norma npm...

EUVD-2025-116165

Malicious code in bellatrix-figures-mongodb-warp npm...

EUVD-2025-112096

Malicious code in juno-atlas-mongodb-publish npm...

Malicious code in websockets-procyon-mongodb-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 448205cfd0847c49c523c6703f1cce3e48b8d2c6e81873a334043f1f9a036e37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122855

Malicious code in react-bootstrap-mongodb-phenomic-google npm...

EUVD-2025-111822

Malicious code in leda-rollup-mongodb-heka npm...

EUVD-2025-123695

Malicious code in pino-mongodb-query-kaus npm...

Malicious code in geckodriver-miranda-mongodb-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba8b3f508ce99a7cf07e6d280b4cc7f00d5c36232af66cf25d68dc9777b6cf03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124374

Malicious code in node-sass-magellan-mongodb-auth0 npm...

EUVD-2025-124784

Malicious code in mongodb-meteor-readable-dorado npm...

EUVD-2025-122002

Malicious code in shelljs-mongodb-eridanus-gemini npm...

Malicious code in mongodb-achernar-module-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eae1a1d9e6036f757faac69de61b2bedb3d9d5a5e676a3fa82fb1634b3e068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121761

Malicious code in spica-leda-mongodb-vortex npm...

Malicious code in pino-mongodb-query-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60978187df58a76af8bf3bb453febdb1c26f374f6ca92ace9aab9eefbde3b201 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123731

Malicious code in phoebe-yaml-mongodb-umbra npm...

EUVD-2025-111549

Malicious code in loopback-test-mongodb-sagitta npm...

EUVD-2025-124633

Malicious code in native-backend-dotenv-safe-mongodb npm...

MAL-2025-144291 Malicious code in leda-rollup-mongodb-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e8e055ded6c374433931709e21ef5dbbc32dd336f2b829628a9a9e900854e5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140276 Malicious code in cache-mongodb-oberon-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 03e800145a0cd744f6884e1491601dd0d0e4bb5235ae6f74b6e7ec2fa7f61cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145133 Malicious code in mongodb-materialize-lint-staged-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143e480522b9635afef9b96a04379caf8617f11f48a49d6deb174d2845d3e48e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...