EUVD-2025-124700

Malicious code in mutation-chromedriver-postcss-loader-proxima npm...

Malicious code in deneb-public-lint-staged-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5f757976b5c1d33d87826c3fb999e29d6ecc67ca0b190cb803237d8aeaa20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112392

Malicious code in iota-dotenv-safe-webdriver-mocha-mutation npm...

Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121671

Malicious code in standard-eslint-plugin-mutation-standard npm...

EUVD-2025-114010

Malicious code in epimetheus-mutation-google-neptune npm...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

Malicious code in nuxtjs-redis-fork-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db8c593976479e09837ccb82e9319efd093f3a426157fb5b7f92c821c43c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-foundation-rehype-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f123f6cfaa91f9978bdc24cca9623e08d85340a93961fc3ad11dca2454b73e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a35beeb5c00a5a3c6e78919c6407f1ab921cd1d554cf1886221b360b915a45b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124698

Malicious code in mutation-electron-ariel-nextjs npm...

EUVD-2025-124692

Malicious code in mutation-meteor-magellan-deneb npm...

EUVD-2025-115471

Malicious code in chalk-elara-mutation-protractor npm...

Malicious code in axios-mutation-stop-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef0f78ec274cc166f0d04c5d2e49ce4ced44fb49664709ba53e0ff780fbd8ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140577 Malicious code in ceres-superagent-sedna-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4f07a457df67ef5a49483ad7c134ca928b0e545316389b55502ad45407669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140953 Malicious code in commitlint-auriga-xenos-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb906d86cc0ce4b7f22a79fc879e93b1bbbb1edcf8e8ec7e38e60c024b69811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139679 Malicious code in auriga-install-express-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec57c878f1c91a3125ce5d22ce4ca93c160d03d8b9c78e896caf971f7b8fb83 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147580 Malicious code in sagitta-await-nightwatch-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 599b02ee33e0ca172ba387eb8fee06d5bd917b1b51bf2136c37300c417901fd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...