EUVD-2025-113674

Malicious code in fetch-chalk-mysql-ganymede npm...

Malicious code in atlas-global-mysql-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a9cd21d21e6aec5f232242cece02a587e6446f016f77c2bd9e2f58957bab83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141526 Malicious code in delphinus-non-blocking-mysql-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf1d58c5a5d0d5e690108078ebedab4b4ccd7530c04b5a21e5335aaa9bcbc593 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148075 Malicious code in solis-graphql-figures-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45612d2418157df1b47f3b420231aaaf83a4363bb4a5c2aa3eed9c095e71deb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140604 Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124683

Malicious code in mysql-algol-phenomic-sedna npm...

EUVD-2025-122620

Malicious code in request-mysql-equinox-ariel npm...

Malicious code in ophiuchus-ultra-janus-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5605f667666e11bca911604813e36388a35c57160db80af8971a97b27fb35 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111969

Malicious code in kaus-gatsby-mysql-eris npm...

EUVD-2025-122374

Malicious code in run-script-mysql-antd-csv npm...

EUVD-2025-112457

Malicious code in inquirer-publish-mysql-antares npm...

EUVD-2025-124680

Malicious code in mysql-atlas-heka-hydra npm...

EUVD-2025-120717

Malicious code in vuetify-lacerta-registry-mysql npm...

Malicious code in venus-capella-mysql-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b724566a0010f3cb95b99768196fefde7a8dc593773bc28c8c4893b746f47489 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120908

Malicious code in upgrade-mysql-publish-google npm...

Malicious code in process-mysql-graphql-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123411

Malicious code in prettier-stylelint-mysql-ultra-winston npm...

MAL-2025-143256 Malicious code in helmet-mysql-auriga-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb083d543cb2b32e10d866fd5f088b1cc67195da82893e307ebea62ffee3a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-mysql-polaris-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 642e49e59bbbe4ac10f5aa70b2452a7dbfe7d5a9928016d8a8fe291fbf43801a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...