Malicious code in elara-rocket-pipe-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ff2f73a968804fa97093b76b356f86a3c51d62f7c7b520c02d5fd837aa8eff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115762

Malicious code in callisto-pipe-sedna-terser npm...

EUVD-2025-111290

Malicious code in meissa-pipe-dependencies-promise npm...

EUVD-2025-123660

Malicious code in pipe-docusaurus-docusaurus-pino npm...

EUVD-2025-123658

Malicious code in pipe-jabbah-prettier-stylelint-ganymede npm...

EUVD-2025-123195

Malicious code in proxima-pipe-jabbah-cosmos npm...

EUVD-2025-116213

Malicious code in backend-hyperion-nightmare-pipe npm...

EUVD-2025-123716

Malicious code in phoenix-pipe-subscription-helios npm...

EUVD-2025-123288

Malicious code in promise-castor-pyxis-pipe npm...

EUVD-2025-120912

Malicious code in upgrade-hydra-pipe-sadr npm...

EUVD-2025-123386

Malicious code in private-norma-firebase-pipe npm...

MAL-2025-146170 Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-mui-procyon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1248ced1e49a7b5b8fd9186de24b120fdbed1c2aa66d43c5beaab197ec4d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123652

Malicious code in pipe-release-it-hermes-rollup-plugin npm...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-112306

Malicious code in janus-enceladus-pipe-carina npm...

MAL-2025-143450 Malicious code in hydra-pipe-lint-yonder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf8bc7b83100d9034cd6ba13dcffc904a47fe59fa5d8bfe9e592b2496d9493a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112156

Malicious code in jovian-pipe-pegasus-cz-conventional-changelog npm...

MAL-2025-139336 Malicious code in alphard-pipe-hapi-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4de964b73b312b6b42e268b5dac8158264ef0225d09240b67e80b973cc7da2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pipe-query-puppeteer-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...