EUVD-2025-124402

Malicious code in node-config-sequelize-nestjs-izar npm...

MAL-2025-141600 Malicious code in despina-nestjs-jovian-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc8eefaf5ddae9bf15203ad349315453e20013b6b374db712b239efdefd7ee2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112486

Malicious code in init-nestjs-loopback-pino npm...

EUVD-2025-124487

Malicious code in nightmare-envconfig-nestjs-firebase npm...

Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145393 Malicious code in nestjs-elara-europa-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f89464e7e746d6c3b79b54bdc739a5375084a41e1e9a204bd88647bd48a14ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141975 Malicious code in element-ui-nestjs-draco-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d3d5af2f7340132e6fed6f2da3b621668536b4d11f2c9d5b05065138ad0780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149248 Malicious code in vulcan-nestjs-nodemon-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bca58c5db7f633962cd43a5bc3ee223af16b073b273e82fa1008712c7fafb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148212 Malicious code in spinner-triton-nestjs-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1c8644c3ec5a03892a2fa146bf25282784c5cb965e6b3500b50123c638fb0f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-nestjs-ora-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c77f7e73b40dd673a983113e9fab42f1f437734bcec372c58f95bdab19c231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112450

Malicious code in inquirer-subscription-atlas-nestjs npm...

EUVD-2025-123497

Malicious code in postcss-vuepress-nestjs-init npm...

EUVD-2025-124527

Malicious code in nestjs-elara-europa-spectron npm...

EUVD-2025-122001

Malicious code in shelljs-nestjs-orbit-release-it npm...

EUVD-2025-114135

Malicious code in element-ui-nestjs-draco-hyperion npm...

Malicious code in semantic-release-inquirer-nestjs-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf324a28088a6961749e1576aaf323a6257739fb24de793a90086859618f517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114346

Malicious code in dotenv-safe-nestjs-jest-tool npm...

EUVD-2025-114055

Malicious code in enif-postcss-nestjs-auth npm...

MAL-2025-145405 Malicious code in nestjs-terser-postcss-loader-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea7dc9bb5fec3e638d15d76e199ee6a1c671cd51e20914ae74fbfcf10853450 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...