EUVD-2025-120861

Malicious code in ursa-phoenix-webpack-zephyr npm...

Malicious code in remark-shelljs-phoenix-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123905

Malicious code in pegasus-antares-hydra-phoenix npm...

EUVD-2025-116894

Malicious code in adonis-astro-phoenix-karma npm...

EUVD-2025-123262

Malicious code in prompts-await-phoenix-deneb npm...

EUVD-2025-114465

Malicious code in dione-grus-phoenix-enif npm...

EUVD-2025-120045

Malicious code in zephyr-koa-materialize-phoenix npm...

Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149541 Malicious code in wolf-castor-rimraf-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b53cb9c657508e7f2692c16d60d43936cc7507391d4e49684b451e4afcad2815 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146205 Malicious code in phoenix-pipe-subscription-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4d42780a7001aa44f3c101823bdbcade9d30f0ca76707a7e229a9f1072c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116824

Malicious code in aldebaran-gatsby-phoenix-toml npm...

Malicious code in blaze-morgan-phoenix-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8f2730776016d8729f42fc992941a569b95e90a52a4a69625b5a6d6d7a60a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121267

Malicious code in thuban-postgres-sails-phoenix npm...

Malicious code in neptune-redis-centaurus-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30cb182b799074deae5eade3e79ff72d686bbd8345adfb98ac22f45c1e1abbe2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123009

Malicious code in quantum-promise-phoenix-nodejs npm...

EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

EUVD-2025-121166

Malicious code in transform-dorado-phoenix-mensa npm...

EUVD-2025-123729

Malicious code in phoenix-achernar-nightmare-eridanus npm...

EUVD-2025-121629

Malicious code in stop-ganymede-prettier-plugin-markdown-phoenix npm...

MAL-2025-147333 Malicious code in resolvers-registry-less-loader-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 721081aa1d483891bbd09014143becd91e4a4aad2f1cf9b6a947fcdc5e8bfe16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...