MAL-2025-188331 Malicious code in nodemon-css-loader-husky-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c6f6980a8e239fba86b499d7e58efed539940a9b4a001da5150da2f24d7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188560 Malicious code in parcel-panspermia-commitlint-config-angular-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad7ce5ec778c0d8a09caa214fc9ed62c9222306281fcc29ee88e7c4f779e7806 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120412

Malicious code in winston-ophiuchus-native-parcel npm...

EUVD-2025-123957

Malicious code in parcel-markdownlint-start-uglify-js npm...

EUVD-2025-123391

Malicious code in private-eris-express-parcel npm...

EUVD-2025-123967

Malicious code in parcel-chariklo-uninstall-regulus npm...

EUVD-2025-123971

Malicious code in parcel-aurora-pegasus-version npm...

EUVD-2025-123962

Malicious code in parcel-gravity-lynx-triton npm...

EUVD-2025-116562

Malicious code in aquarius-mdx-parcel-subscription npm...

EUVD-2025-111381

Malicious code in materialize-await-equinox-parcel npm...

EUVD-2025-123974

Malicious code in parcel-apollo-framework-venus npm...

EUVD-2025-120410

Malicious code in winston-pino-pretty-parcel-publish npm...

EUVD-2025-112855

Malicious code in helmet-nashira-carina-parcel npm...

Malicious code in parcel-chariklo-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-mui-event-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3a8fdcd7a231752e40c7d558b2efeafc603d9ec4bee1ff23f8c5ec2d88e5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sedna-parcel-css-loader-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 890b20fdeac58083ea4dc8ac0159ee633ef660eb39bd5b22367ef4442d9424b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122141

Malicious code in sedna-parcel-schema-envconfig npm...

EUVD-2025-121911

Malicious code in soap-antd-antares-parcel npm...

EUVD-2025-114341

Malicious code in dotenv-safe-parcel-convict-umbriel npm...

Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...