EUVD-2025-114868

Malicious code in cressida-repository-mutation-thuban npm...

EUVD-2025-114236

Malicious code in elara-equinox-mutation-hercules npm...

Malicious code in protractor-rocket-terser-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6784835499ff275075838e347dcf3d09c0983db7b6cf15dada34f13e5f0e66a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124684

Malicious code in mutation-telesto-mongodb-xml npm...

EUVD-2025-116703

Malicious code in antares-config-mutation-jekyll npm...

EUVD-2025-124696

Malicious code in mutation-foundation-mocha-cosmos npm...

EUVD-2025-121003

Malicious code in umbra-mutation-morgan-async npm...

EUVD-2025-121622

Malicious code in stop-slides-mutation-non-blocking npm...

Malicious code in json-development-publish-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a13ea91c3e39772484aa02c1e2b6604be57894e72701604e225fe0423043eaf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wezen-framework-dotenv-safe-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87602dc7c2a6edae48bfb5c94901e8a70ec0be68891fd9a43a379fc6da8d7a2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-galaxy-auth-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 316d9045e3e8076d3037b7e88e029d05d1a61786e6f3a223a912231e8e694c48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cluster-betelgeuse-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8566c2ab12a83f43b06b438c52d6e0cedc4ae293d1a73f53300b8db6e9422b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-uglify-js-loopback-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969453b7c95bbb635798c2fbb32eb82ad057c0ecee4a345dff7328325dd2a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-rollup-adonis-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ac168b880ae287e65f1638c1badd728ba959d9184a9c4540169154dec70e52e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116046

Malicious code in blitz-pm2-mutation-koa npm...

EUVD-2025-121710

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation npm...

EUVD-2025-124694

Malicious code in mutation-ganymede-proxima-eslint npm...

Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-bellatrix-carina-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e7b4fba863e8539203503c96d45117262c003514f6fa24b312460eefc90397 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...