MAL-2025-145348 Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123409

Malicious code in prettier-stylelint-oauth-dagda-venus npm...

EUVD-2025-116290

Malicious code in await-venus-oauth-deneb npm...

EUVD-2025-121789

Malicious code in spectron-webdriver-oauth-spectron-webdriver-commitlint npm...

EUVD-2025-124286

Malicious code in norma-charon-cypress-oauth npm...

EUVD-2025-111541

Malicious code in luna-oauth-ophiuchus-wezen npm...

EUVD-2025-113065

Malicious code in gridsome-oauth-bulma-html-webpack-plugin npm...

EUVD-2025-114383

Malicious code in dotenv-parse-variables-module-oauth-magellan npm...

EUVD-2025-116387

Malicious code in auth-atlas-oauth-nova npm...

EUVD-2025-122994

Malicious code in quark-metalsmith-cypress-oauth npm...

Malicious code in phoebe-oauth-blitz-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c729a4cb488df8cae036da08e103306bdad34795f865fc600c0f099b12065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113337

Malicious code in gacrux-oauth-yonder-neptune npm...

EUVD-2025-124195

Malicious code in oauth-dorado-gacrux-ora npm...

EUVD-2025-114398

Malicious code in dotenv-parse-variables-callisto-oauth-framework npm...

EUVD-2025-122997

Malicious code in quark-galaxy-phenomic-oauth npm...

EUVD-2025-120589

Malicious code in webdriver-mocha-airbnb-dagda-oauth npm...

EUVD-2025-122353

Malicious code in sadr-oauth-less-magellan npm...

Malicious code in oauth-eslint-event-levels (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 912e33dda74d1110c5a19a58e60ba349b4e47d20b5d79ea2ab9027ea4b4bacc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-enceladus-oauth-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3975364cd584979fb854f2c748200a3cfe076aa7bb4f0fa02f2739d144b73a20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...