EUVD-2025-121003

Malicious code in umbra-mutation-morgan-async npm...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

Malicious code in fornax-markdown-mutation-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbcdc7bcce2ff393fd1e2c0c05e1f17bbe1e11892186f9dec5884fda469b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148106 Malicious code in spawn-sirius-venus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4135237922c194529580f1e2d58a8ea86cfeaeafd6f22e5821f21fc7240da818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140953 Malicious code in commitlint-auriga-xenos-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb906d86cc0ce4b7f22a79fc879e93b1bbbb1edcf8e8ec7e38e60c024b69811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144898 Malicious code in meteor-apollo-upgrade-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6297cc76699859130e9718018440cd30c840913c432fca2c2f56741aa440712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141141 Malicious code in cors-venus-ganymede-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f72ad5f784dee940ad28978b1bd0d8d0fa2406b3ede5cb29dda4a9d2647f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141539 Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121371

Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...

EUVD-2025-112631

Malicious code in hyperion-janus-mutation-callback npm...

EUVD-2025-121519

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...

EUVD-2025-122114

Malicious code in selenium-pm2-titan-mutation npm...

EUVD-2025-115257

Malicious code in colors-hugo-mutation-blaze npm...

EUVD-2025-123520

Malicious code in postcss-loader-mutation-command-procyon npm...

EUVD-2025-120161

Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...

EUVD-2025-113793

Malicious code in event-mutation-commitizen-virgo npm...

Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...