Malicious code in browserify-sedna-apollo-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9274311e3df04e5c51c1bd2fd4419846f61128c31217b919fde8910c9c1e8e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180141

Malicious code in bad-xml-simple-yaml-reject npm...

EUVD-2025-177036

Malicious code in procyon-andromeda-configstore-javascript npm...

EUVD-2025-179035

Malicious code in eslint-plugin-ophiuchus-pino-chromedriver npm...

EUVD-2025-176535

Malicious code in sandbox-kernel-web-good-static npm...

Malicious code in cache-mensa-leda-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56788cff5b913c5a179cd511025821a24df1bc1ca382527d1e91bf6fd180e3ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177412

Malicious code in orbit-zenith-magellan-antares npm...

EUVD-2025-176388

Malicious code in sigma-compile-simulate-integer-bash npm...

EUVD-2025-175862

Malicious code in try-stub-yaml-query-awk npm...

EUVD-2025-180314

Malicious code in asjustmeteai npm...

EUVD-2025-179228

Malicious code in dynamo-mini-css-extract-plugin-cosmicsilence-frontend npm...

EUVD-2025-180143

Malicious code in bad-stub-key-fast-minify npm...

Malicious code in concurrently-configstore-lyra-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbdd3e3fbd31161db4d4c071bc50e19eb1af1064e748a5e2f0131d7ff033d0b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177434

Malicious code in optimize-cache-static-orchestrate-import npm...

Malicious code in wasat-pulsar-exobiology-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e635e404118b2e59ba1075a23a30f95a3df3eb263ecfdadd9ab1f39c6019e89a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-gridsome-oortcloud-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db6bfd77d9dd95c84108659afc62dfad4e071d33b38b1e7b726038c0e49792b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178198

Malicious code in key-orchestrate-promise-mu-bad npm...

EUVD-2025-176553

Malicious code in sagitta-shelljs-halley-grunt npm...

Malicious code in metalsmith-antares-barnard-yildun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450389a4510dcbb902b1868e1dfe320565f58b8703cf3b2c809d5d1dce57c4e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-registry-forever-prettier-plugin-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c9bee273ba762279ba30203b2a54d467cc3b01e489006d55110b49d433736a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...