EUVD-2025-123636

Malicious code in playwright-pipe-jwt-middleware npm...

EUVD-2025-123650

Malicious code in pipe-umbra-mira-concurrently npm...

EUVD-2025-123656

Malicious code in pipe-phenomic-zenith-dotenv-safe npm...

EUVD-2025-114007

Malicious code in epimetheus-pipe-janus-cli npm...

Malicious code in hapi-iota-pipe-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6704db381e370c13375724452840d7934ccdd42b0c11abe9e9c9e1356ac4777c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146933 Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123659

Malicious code in pipe-dynamo-nodejs-stream npm...

MAL-2025-146144 Malicious code in phoebe-centaurus-pipe-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a3a8c18f7ac238f1acacd09802476e050fd2c967e0bf88d0d81b6c9e94639a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149577 Malicious code in writable-pipe-terser-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b346e7180c776eeac064af2ee804e6e3afb1e9fb00242af926790c461827e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112053

Malicious code in jupiter-lynx-pipe-miranda npm...

EUVD-2025-123717

Malicious code in phoenix-pipe-luna-nashira npm...

EUVD-2025-113379

Malicious code in fusion-ganymede-pipe-package npm...

Malicious code in eslint-pipe-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 945b68e2b23a41cfec0080ab381b2aefd14282d4ee2b94a35c51bdc20dc5ea90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122989

Malicious code in quark-pipe-mocha-nodejs npm...

EUVD-2025-111997

Malicious code in karma-pipe-leda-ignite npm...

Malicious code in materialize-express-pipe-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da7e4b1d7e60ee0615d87ce284dd64e6b3589d46b59a2f04f438ece588486e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-pipe-janus-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81cf70b023c5a2030e7b0b477fe8e7e00b2788618c9cb5e318879b46b9e30063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in karma-pipe-leda-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737a5e0e5e3b86f535e6d2720d1b3848b751f4c3cadf9db24437aa6bfeadaaf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122343

Malicious code in sagitta-altair-winston-pipe npm...

Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...