EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-123892

Malicious code in pegasus-ganymede-native-taurus npm...

EUVD-2025-121226

Malicious code in toml-chalk-restart-native npm...

EUVD-2025-114661

Malicious code in dactyl-native-superagent-nextjs npm...

Malicious code in async-native-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cea674df46845fb77c13437ffe4d939741ffe9a2677b308288efb81c6c5ed58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122468

Malicious code in rimraf-native-wezen-karma npm...

Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-native-dotenv-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

EUVD-2025-122541

Malicious code in restart-event-achernar-native npm...

EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

MAL-2025-144393 Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147936 Malicious code in sirius-aurora-warp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5daf0e0b031d2cf938436afe95c35e412c219634f9978e99bd972480618c7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145290 Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122890

Malicious code in rate-limiter-bunyan-centaurus-native npm...

EUVD-2025-124630

Malicious code in native-enif-redis-redis npm...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...