EUVD-2025-112392

Malicious code in iota-dotenv-safe-webdriver-mocha-mutation npm...

Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114236

Malicious code in elara-equinox-mutation-hercules npm...

Malicious code in antares-equinox-semantic-ui-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd5fed7ff9a700123815739d80aeb235f0417ed6c7a5251ab4cc8c7688a8c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114868

Malicious code in cressida-repository-mutation-thuban npm...

EUVD-2025-114899

Malicious code in cosmos-mutation-eslint-vega npm...

EUVD-2025-113478

Malicious code in fornax-markdown-mutation-got npm...

Malicious code in nuxtjs-uglify-js-loopback-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969453b7c95bbb635798c2fbb32eb82ad057c0ecee4a345dff7328325dd2a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-foundation-rehype-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f123f6cfaa91f9978bdc24cca9623e08d85340a93961fc3ad11dca2454b73e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gridsome-library-jsonp-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cc5c16176702b84773f164a05dec951742e942a5f7b658af063f0cc6480aa19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-development-publish-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a13ea91c3e39772484aa02c1e2b6604be57894e72701604e225fe0423043eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-dorado-nodejs-farout (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2068387ab80adce0759613f29f075a88784c8817a194f0f24b0994bf6ea4f55d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-framework-dotenv-safe-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87602dc7c2a6edae48bfb5c94901e8a70ec0be68891fd9a43a379fc6da8d7a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-bellatrix-carina-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7b4fba863e8539203503c96d45117262c003514f6fa24b312460eefc90397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-subscription-mutation-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef6069b47a6b2862e67c0f0f0744fb681095e2822c4e2f137380f566fd627e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124698

Malicious code in mutation-electron-ariel-nextjs npm...

EUVD-2025-116703

Malicious code in antares-config-mutation-jekyll npm...

EUVD-2025-121003

Malicious code in umbra-mutation-morgan-async npm...

EUVD-2025-124694

Malicious code in mutation-ganymede-proxima-eslint npm...

Malicious code in tool-aquarius-juno-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ae16d041898022924aabc7f30463dde9cf9a13dd7d8407aef91c9a7cdf7be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...