EUVD-2025-111720

Malicious code in library-zenobia-native-cache npm...

EUVD-2025-111186

Malicious code in meteor-readable-norma-native npm...

EUVD-2025-112219

Malicious code in javascript-umbriel-kronos-native npm...

EUVD-2025-112158

Malicious code in jovian-native-google-altair npm...

Malicious code in axios-native-concurrently-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 859eb00c4af130b26cb5ce79f6eba7269c3381cfbba2c0655acbeb56b2e3e2a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bulma-jest-native-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0b40cb822ff26e7b9ff2e5312fb6258c4d7e5bf4a031285331bcabfdf2cc1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-rollup-package-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-equinox-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ee17a1a11f62310bd6043d3296351b281b50f31c46091754519d19a34fa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-ganymede-native-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-bunyan-centaurus-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7041aeb6d4b6daae8b199986a9b05f5f12ff05ec198d264fea5a5274b2a9b38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-native-wezen-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f783af03f5cd53bdf2d57a926a7e3f1eac33d66fc2c6865ab531181c7f231f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-dactyl-native-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e75d4c1b12be6cab04ee7f5ac141232ed1154e896eae56fd8e00baf86a39cd1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...