Malicious code in zenith-polaris-warp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1ce5d07c12870a3c118a4ad89de58f1274582f8f89ea161afda22f2f8f4faee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116050

Malicious code in blitz-nodejs-postcss-umbra npm...

EUVD-2025-111756

Malicious code in levels-node-config-nodejs-dione npm...

EUVD-2025-124362

Malicious code in nodejs-csrf-dotenv-safe-solis npm...

EUVD-2025-121318

Malicious code in testcafe-xenon-chakra-ui-nodejs npm...

EUVD-2025-120634

Malicious code in wasat-mui-sadr-nodejs npm...

EUVD-2025-124353

Malicious code in nodejs-io-jwt-global npm...

EUVD-2025-111524

Malicious code in lynx-dotenv-safe-nodejs-json npm...

EUVD-2025-124347

Malicious code in nodejs-proxima-link-prettier npm...

Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144654 Malicious code in magellan-nodejs-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a287064aebd8dc02a43ccaea9def800416fdf41787c254c715a4c63df047f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145694 Malicious code in nuxtjs-apollo-gulp-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af6597f351418457f4a298e75a760f4998e77546742ce0037ebdfd07297dda10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124360

Malicious code in nodejs-dependencies-unuk-duplex npm...

MAL-2025-145569 Malicious code in nodejs-javascript-winston-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a08759811e9231c84fe5943c1d82297170a12b450089b82e470c7d2b2d89911e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-cygnus-nodejs-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 651479aa3db2b298e19b1bf6bdb357570bc6913f883187b5579d826660d52d9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116788

Malicious code in algol-weywot-loopback-nodejs npm...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148468 Malicious code in taurus-exec-javascript-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdedd5376e6fe1861b11be01534bfda0c690e573d66adc4218268940bdf545eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...