MAL-2025-168630 Malicious code in tealove-okta50 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08b68eab6996f1d17307609c82d3d37ac3123a37ab8250b6fe7a83f88cd42d38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151680 Malicious code in abyila-nibi-luyipai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 610db148982b6e91344488cfa451513e2cad72b9b22d7d30c6c91b9aeb9bd21e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167204 Malicious code in teagood-nakama4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8b9aa6e82762e27566849870372e2ec7e9132899b044ec380db4a0a094e2145 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164972 Malicious code in rita-95 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f328c67bca3b3029d0f1cafeeafdb11f65ad7a12284137ac6c3b21c41ec0bbd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166939 Malicious code in teagood-lokika71 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecb7e5e7a7e204607a169336b523d9260b4ae206cca997b0bd3179d9d618f345 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124691

Malicious code in mutation-odin-barnard-altair npm...

EUVD-2025-124698

Malicious code in mutation-electron-ariel-nextjs npm...

EUVD-2025-120889

Malicious code in ursa-apollo-mutation-blaze npm...

Malicious code in subscription-fetch-orbit-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c4539a564bbc6f484d4f38280cfc4f3a247f08e4598c2bbebdb3b9d9d028bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

EUVD-2025-123520

Malicious code in postcss-loader-mutation-command-procyon npm...

EUVD-2025-115257

Malicious code in colors-hugo-mutation-blaze npm...

Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115005

Malicious code in cordelia-mutation-halley-uglify-js npm...

EUVD-2025-124686

Malicious code in mutation-spectron-elektra-module npm...

EUVD-2025-120161

Malicious code in yakutsk-html-webpack-plugin-koa-mutation npm...

EUVD-2025-122114

Malicious code in selenium-pm2-titan-mutation npm...

EUVD-2025-116849

Malicious code in airbnb-fork-mutation-fusion npm...

EUVD-2025-114010

Malicious code in epimetheus-mutation-google-neptune npm...