Malicious code in auth-non-blocking-ini-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c0b15945d56e729cf31bab7127c7e22fea1f173b7506f6861413ee2005b0fcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-less-express-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562a2f28d71d1862fe1f923bc1ffe145c137be676be0bd1b77de0183b4bddd86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-dotenv-safe-got-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97ec042cfe2b369dc9c550415ab4881c8b222e5b9e1b1ffd6d863083eed4048b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 132d462cb3f8ba91cc11be917727ab1ca853b46458b018881fc53fadf941c0bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-ora-non-blocking-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72234f1311d1f62cd8d227441dd0e05d6145857f9cf50b8d867c692c33ba1a3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-playwright-ini-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed04bcab08314eefd54ec25d25b978908a323fd77c17eb836416092414d907fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-superagent-non-blocking-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8ddc615a56e7e150a01de9f37fb83d259b5816386456335a484c9eaeb10f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-non-blocking-hexo-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d885f6678a047d144fa23ca12189e3691db1ed724e104927120acef8a43c47e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112635

Malicious code in hyperion-hermes-oauth-non-blocking npm...

EUVD-2025-124663

Malicious code in mysql-mongodb-non-blocking-equinox npm...

EUVD-2025-115918

Malicious code in build-non-blocking-tailwindcss-spica npm...

EUVD-2025-123431

Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec npm...

EUVD-2025-116009

Malicious code in bootes-toml-non-blocking-version npm...

EUVD-2025-124668

Malicious code in mysql-janus-non-blocking-stream npm...

MAL-2025-146631 Malicious code in promise-aether-private-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147991 Malicious code in slides-non-blocking-dotenv-safe-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850f47bc6fffbed41e4a34730cecc0e53621b63abb4a3b3199ba5f61ad97ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143804 Malicious code in janus-cors-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab10dd4a20efdee524a8a1e195d284589d12d19dfdb7436f4055a944dc3aa658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...