EUVD-2025-123357

Malicious code in process-radiant-frontend-version npm...

Malicious code in process-fornax-local-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f3220f679eb62fd137d7337ff1fea5b4a82a683412b487acdc28e5e9e26e04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123347

Malicious code in process-xo-triton-farout npm...

MAL-2025-148579 Malicious code in test-rest-yildun-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efd93457911583a80de21e9b21451295f65c77d6d419c0b90cb170b23720d02f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146840 Malicious code in pulsar-process-postgres-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3c5e2bbe84db3411a75161d881cd19b7ee5d38d0119381a3d89f41921e2bd74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143128 Malicious code in halley-alphard-process-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70fd87a0b41ed17c1e8aeab77b69a49d174d403a417552c2b91afa0568e48d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145759 Malicious code in oberon-xenos-process-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e025f47c913177a7992cfaf90cc9e7fb5b31a0018e27e73399b2e5c34a67df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140757 Malicious code in child-process-telesto-test-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 173fd53c1da999600d870a02683e28098bb3288c9a590b7739013b33c2b68fee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141539 Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

Malicious code in quito-phoenix-process-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a1b557507e22a34ed6c77ffa39819f688ae4f6a674cf5520022347c6e212560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-writable-gacrux-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df7a73dfed72bf62e1c1142ffba2b771c5040d09b3102fe730d95184da5ce29f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111861

Malicious code in lacerta-ursa-process-epimetheus npm...

EUVD-2025-123733

Malicious code in phoebe-wolf-ceres-process npm...

EUVD-2025-116731

Malicious code in altair-umbriel-child-process-cross-env npm...

Malicious code in csrf-process-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffbfe931a8e51ce2cf27b87751a2a29dae84389abf262cde9b1af1587c6307b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142856 Malicious code in geckodriver-betelgeuse-child-process-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31abebe698d8af8cbc8ebce961177393b1d102428f71683195d47280d39b7ea6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122778

Malicious code in regulus-child-process-sedna-terser-webpack-plugin npm...

MAL-2025-146934 Malicious code in quark-process-schema-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eaec4fe47aea0991145f9198831818cd8927acd7ff0779d6a8a4553a3b0018f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...