EUVD-2025-116575

Malicious code in apollo-repository-uglify-js-nextjs npm...

Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in astro-nextjs-sedna-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20611358ebe53864fba342e25d51ab7ae0970d8e843144dbb1ad433758e9a19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111901

Malicious code in kronos-antd-dorado-nextjs npm...

EUVD-2025-122411

Malicious code in rollup-plugin-changelog-oberon-nextjs npm...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

EUVD-2025-120700

Malicious code in vulcan-eleventy-nextjs-aether npm...

EUVD-2025-112461

Malicious code in inquirer-nextjs-galaxy-hyperion npm...

MAL-2025-145408 Malicious code in nextjs-adonis-kastra-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ec12e9d021d38f1396774e15aed3fc937841fe74ebd34c63516944c0f9a23f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142940 Malicious code in global-lacerta-sagitta-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aab090a06890abad34f96c9d0c014ede763e63fe2ccc634f3da5a8b7fa2a1af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148028 Malicious code in soap-nextjs-init-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35e009b07aa96f1cb8004669b245e171142af2ea87fd59386384974b1fd1199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147178 Malicious code in rehype-nextjs-xenon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d727a33ec08ff0d055e7f2c12a05f0637219bcf225ace11ae4c8b75402577cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in impulse-mdx-quantum-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c36caf23a8d04a63bccd9e6f7ffac308c2ee9c62c18e2f3f6e549f580d38621 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113761

Malicious code in exec-less-commitizen-nextjs npm...

EUVD-2025-124500

Malicious code in nextjs-phoebe-commitizen-dagda npm...

EUVD-2025-112565

Malicious code in impulse-mdx-quantum-nextjs npm...

MAL-2025-149869 Malicious code in zenobia-nextjs-despina-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c39b2b8df8c767b81fc7ef59247aa5eb4ec4ed8f9332c752e245b3c566a99aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145736 Malicious code in oauth-nextjs-winston-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f33e356c375a07eb1114356bc140ade2d78b93ddd6e18f333b96d5d5ba5afee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...