Malicious code in pipe-query-puppeteer-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 217327ddb3a81eb68c11448bac7cc579de2bd37f7d5a20bcf44b6411817105e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-pipe-mocha-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fbf13855675eb0f04555f377cf94b4bcc89c117c1b9e7a004ad4c3159c4c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-mui-procyon-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1248ced1e49a7b5b8fd9186de24b120fdbed1c2aa66d43c5beaab197ec4d1247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in upgrade-hydra-pipe-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9e18cb32f9743ad0393c9b37380bc6d659a698bcfa50db24fb1611874cfe712 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113379

Malicious code in fusion-ganymede-pipe-package npm...

EUVD-2025-112927

Malicious code in hapi-iota-pipe-selenium npm...

EUVD-2025-112897

Malicious code in heka-quito-pipe-eslint-config npm...

EUVD-2025-112887

Malicious code in helios-algol-norma-pipe npm...

EUVD-2025-114007

Malicious code in epimetheus-pipe-janus-cli npm...

EUVD-2025-113758

Malicious code in exec-mocha-pipe-repository npm...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-114222

Malicious code in elara-rocket-pipe-update npm...

EUVD-2025-115762

Malicious code in callisto-pipe-sedna-terser npm...

EUVD-2025-115565

Malicious code in centaurus-despina-pipe-oauth npm...

EUVD-2025-116641

Malicious code in antd-meteor-pipe-cosmos npm...

EUVD-2025-116213

Malicious code in backend-hyperion-nightmare-pipe npm...

EUVD-2025-116151

Malicious code in bellatrix-pipe-dione-cordelia npm...

EUVD-2025-116766

Malicious code in alphard-pipe-hapi-remark npm...

MAL-2025-146651 Malicious code in promise-subscription-pipe-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44873f9180d44c4ea0b33fc58995dfb2d97754c2f380301d81304b5a95ba58a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...