Malicious code in electron-builder-jupiter-markdown-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65e6c34d8ac0eb601de5dbe1d8ffd3e9486188b296e4dabf08a27344637a8159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114002

Malicious code in epimetheus-solis-perseus-mutation npm...

Malicious code in protractor-rocket-terser-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6784835499ff275075838e347dcf3d09c0983db7b6cf15dada34f13e5f0e66a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124684

Malicious code in mutation-telesto-mongodb-xml npm...

EUVD-2025-113793

Malicious code in event-mutation-commitizen-virgo npm...

EUVD-2025-121519

Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation npm...

Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-markdown-mutation-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbcdc7bcce2ff393fd1e2c0c05e1f17bbe1e11892186f9dec5884fda469b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eris-auth-fusion-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-test-mongodb-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06c06e20ea113a93cf3404abcf96e9951035a0ebe9ec1158d959e1b2ff25a16f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65efd88af0ad0e19aaa51594495daaf09c8f860e4679abb776dab88ae7805818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mutation-bunyan-materialize-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dafd16f59961d7f0089c5ad1a6a43e4deb50395ede6d4038ed260d6143ff3858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in heka-axios-norma-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73951474211d7a156d6f0dd2f5c15de1056829caeabec1282feca686bcd2d2ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-equinox-semantic-ui-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd5fed7ff9a700123815739d80aeb235f0417ed6c7a5251ab4cc8c7688a8c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124688

Malicious code in mutation-rehype-semantic-ui-install npm...

Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115593

Malicious code in celeste-mutation-private-rollup-plugin npm...

Malicious code in chakra-ui-neptune-eslint-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c4f096543a30ee5960737681cf9b3aa1939dc04aebef1c0ef66fe0b9706477 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-fomalhaut-cypress-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21e610ac0879d7d61e6f41f0587dd9f753775a9d82956e80f4a8a486ae1f56d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...