EUVD-2025-124693

Malicious code in mutation-levels-antares-nightwatch npm...

EUVD-2025-120306

Malicious code in xanthus-halley-gravity-mutation npm...

Malicious code in mdx-xanthus-publish-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b88b554e5795b09009304395c41d2d8ed261efbb6c45efc062cfe2be9d87132f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111865

Malicious code in lacerta-mutation-lyra-loop npm...

Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124687

Malicious code in mutation-rest-mongoose-castor npm...

EUVD-2025-124689

Malicious code in mutation-puppeteer-dactyl-morgan npm...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

Malicious code in fornax-markdown-mutation-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffbcdc7bcce2ff393fd1e2c0c05e1f17bbe1e11892186f9dec5884fda469b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124691

Malicious code in mutation-odin-barnard-altair npm...

Malicious code in uglify-js-quito-ursa-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaadc495679e60a19ec8445196bd4b7acb163dfea8b86c1a624c45ecead0fef3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootstrap-ophiuchus-elara-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31e4f5d3af59e6bd66aa2444ad893147c22dc875ee1e34d0ee71464198a3010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-schema-scorpius-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69853a39d7a0295572d26acde7950f2beaf45da49f5298625f19213d97277f94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-comet-style-loader-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72f65fcdb29603b945d42935419406e4a2f23453bfa8433eb0a8fe85837cc7d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115005

Malicious code in cordelia-mutation-halley-uglify-js npm...

EUVD-2025-113793

Malicious code in event-mutation-commitizen-virgo npm...

Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-radiant-buffer-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b0e8909e37ffb7611e51a5a0d1e31f10eaffec7ffa942ce0774a9d78860af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...