Malicious code in fornax-radiant-buffer-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b0e8909e37ffb7611e51a5a0d1e31f10eaffec7ffa942ce0774a9d78860af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120168

Malicious code in yakutsk-config-mutation-ursa npm...

EUVD-2025-115942

Malicious code in buffer-mutation-changelog-karma npm...

Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...

EUVD-2025-115582

Malicious code in centauri-configstore-postcss-mutation npm...

Malicious code in avior-loglevel-hercules-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a673a6c10ed1fb774ba0a37635703be63874a22ef2aae819b4fb1d6461e8efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-chromedriver-postcss-loader-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67015401d420f0d76976cc33d6c4b78a0808d48575356ada771e44ec5c50d631 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-comet-style-loader-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f65fcdb29603b945d42935419406e4a2f23453bfa8433eb0a8fe85837cc7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-ophiuchus-elara-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e4f5d3af59e6bd66aa2444ad893147c22dc875ee1e34d0ee71464198a3010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-axios-norma-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73951474211d7a156d6f0dd2f5c15de1056829caeabec1282feca686bcd2d2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113793

Malicious code in event-mutation-commitizen-virgo npm...

Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124689

Malicious code in mutation-puppeteer-dactyl-morgan npm...

Malicious code in cz-conventional-changelog-publish-celeste-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eda11c057953654bef26e09da7efd85262db6c8cf366a83a67b5bc4d9063b38d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-xanthus-publish-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b554e5795b09009304395c41d2d8ed261efbb6c45efc062cfe2be9d87132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...