EUVD-2025-116387

Malicious code in auth-atlas-oauth-nova npm...

EUVD-2025-122994

Malicious code in quark-metalsmith-cypress-oauth npm...

Malicious code in phoebe-oauth-blitz-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c729a4cb488df8cae036da08e103306bdad34795f865fc600c0f099b12065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124572

Malicious code in nebula-oauth-resolvers-dotenv-safe npm...

EUVD-2025-124195

Malicious code in oauth-dorado-gacrux-ora npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-113337

Malicious code in gacrux-oauth-yonder-neptune npm...

EUVD-2025-122997

Malicious code in quark-galaxy-phenomic-oauth npm...

Malicious code in umbra-cors-electron-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2b92bcd7188d16cd76c7ccf6208ce4d10b1301c8af83f2759ed6ef2e0bb796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120589

Malicious code in webdriver-mocha-airbnb-dagda-oauth npm...

EUVD-2025-122353

Malicious code in sadr-oauth-less-magellan npm...

Malicious code in oauth-eslint-event-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912e33dda74d1110c5a19a58e60ba349b4e47d20b5d79ea2ab9027ea4b4bacc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123755

Malicious code in phoebe-oauth-blitz-playwright npm...

Malicious code in sagitta-chakra-ui-nightmare-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 056f665d6e1e48a592cd962a70275782e23b71ab0c7b2b8bb2f3c2cd44ce22ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124198

Malicious code in oauth-blitz-nestjs-pipe npm...

EUVD-2025-116854

Malicious code in airbnb-antares-terser-webpack-plugin-oauth npm...

EUVD-2025-124627

Malicious code in native-oauth-fork-webdriverio npm...

MAL-2025-140542 Malicious code in centaurus-despina-pipe-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7412f390ed0a56288b73f2f3b4c82e88af73120b691359e975a6aca3e0cacf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143770 Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...