EUVD-2025-120487

Malicious code in weywot-nightwatch-parcel-apollo npm...

EUVD-2025-123962

Malicious code in parcel-gravity-lynx-triton npm...

EUVD-2025-120412

Malicious code in winston-ophiuchus-native-parcel npm...

EUVD-2025-122176

Malicious code in scripts-sadr-parcel-markdown npm...

Malicious code in parcel-chariklo-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-parcel-markdown-pdf-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d77e33fa6ab5a9f2a3b96a855635c489b92850c24dbce745e25844b9ea32b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121058

Malicious code in uglify-js-dagda-await-parcel npm...

EUVD-2025-112855

Malicious code in helmet-nashira-carina-parcel npm...

EUVD-2025-120445

Malicious code in winston-changelog-dotenv-parse-variables-parcel npm...

EUVD-2025-123007

Malicious code in quantum-request-ganymede-parcel npm...

EUVD-2025-121026

Malicious code in ultra-node-config-parcel-registry npm...

EUVD-2025-114308

Malicious code in draco-xerxes-parcel-browserify npm...

EUVD-2025-113385

Malicious code in fusion-callisto-parcel-nestjs npm...

Malicious code in soap-antd-antares-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a5ca78aa719be19ec810f3b50d1afe612836f899f51ab3d5d2b2d1c67ed486 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115190

Malicious code in command-parcel-stop-less-loader npm...

MAL-2025-139513 Malicious code in apollo-fornax-parcel-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4428990b52194111194eed7d777050d56daa9124b291ecad8271bf7dd940afa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145965 Malicious code in parcel-mensa-vuetify-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfdaae7c1522c825d5fc88e7dee72b39025eedf7b9ba29e41812384ecb3969fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145947 Malicious code in parcel-apollo-framework-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cea42becba6a089bebabca0dc3b4529b470bb588c4ad13b4ebd10402cbc0a618 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144598 Malicious code in lynx-parcel-telesto-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11a81e296bc597462543d7c7356b81d22d0bd5ba481700455ce5e90096884655 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...