EUVD-2025-123225

Malicious code in protractor-rocket-terser-postgres npm...

Malicious code in postgres-lynx-server-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 653bfe654a28358db49904eeb2b34c023f8628805655e602d273525e055557ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nextjs-dorado-postgres-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfecd304fb29e3151b62547d5f3fb6dca1cf7d3e850787cf00409d38af9b09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114704

Malicious code in cypress-redis-postgres-bulma npm...

EUVD-2025-115468

Malicious code in chalk-ganymede-postgres-publish npm...

MAL-2025-146440 Malicious code in postgres-neptune-bootes-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe1f7cc57e5378ad22e5eddec6f8f07092ecffa0c918b156ad32967ae2ea0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123471

Malicious code in postgres-webdriver-manager-cosmos-slidev npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-postgres-forever-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8721b5af0dbe9dec968beee5e2b0a96aad969806791083ca6d0be1ea401c9c23 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116615

Malicious code in apex-unuk-postgres-standard npm...

EUVD-2025-113012

Malicious code in grus-publish-carpo-postgres npm...

EUVD-2025-111748

Malicious code in levels-telesto-eslint-postgres npm...

EUVD-2025-113633

Malicious code in figures-postgres-tailwindcss-css-minimizer-webpack-plugin npm...

EUVD-2025-114338

Malicious code in dotenv-safe-postgres-perseus-draco npm...

Malicious code in firebase-leda-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-neptune-bootes-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe1f7cc57e5378ad22e5eddec6f8f07092ecffa0c918b156ad32967ae2ea0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115707

Malicious code in capella-webpack-octans-postgres npm...

MAL-2025-140363 Malicious code in canopus-leda-postgres-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16592b4ce6c067b6870d21abaf030dffb146d291061175fd9639b09e183061f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140601 Malicious code in chai-postgres-spica-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86423b10b6f306d99f24e92167c625a39c2149992f37343635ede70b25d42e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...