EUVD-2025-121371

Malicious code in terser-webpack-plugin-mutation-mutation-unuk npm...

Malicious code in hercules-fomalhaut-chai-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f39492099e5c35700f3b300efb4232b727c56c7bf176574b232c0f5d7d127f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124684

Malicious code in mutation-telesto-mongodb-xml npm...

EUVD-2025-124686

Malicious code in mutation-spectron-elektra-module npm...

Malicious code in eris-auth-fusion-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-rocket-terser-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6784835499ff275075838e347dcf3d09c0983db7b6cf15dada34f13e5f0e66a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112656

Malicious code in hydra-semantic-release-flare-mutation npm...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-112151

Malicious code in json-algol-antares-mutation npm...

Malicious code in aether-cygnus-nodejs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-sqlite-meissa-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29327f59a8318f6abc51bcfd6abe17a7008f1530fcf43b381c55f14e7d32ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in airbnb-fork-mutation-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 793b36b14fb2abf3bdaac4f697b01eff9656ab057f26f8af0397d78ec7130074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-config-mutation-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd8607db0f5cf2f8df42373224d4090df0a43cab1471cdd21e6c2bdd337fe782 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-equinox-semantic-ui-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdd5fed7ff9a700123815739d80aeb235f0417ed6c7a5251ab4cc8c7688a8c9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-mutation-websockets-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a95486272da0dcb64f02df91085552ced1adeb9b08f616af39826bb91826831 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in avior-loglevel-hercules-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a673a6c10ed1fb774ba0a37635703be63874a22ef2aae819b4fb1d6461e8efbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-pm2-mutation-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee9947d7d777aa5109d31e05196cc3ee49ee24d523164a0c11029270bcfcfb02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...