EUVD-2025-115596

Malicious code in celeste-juno-restart-tethys npm...

EUVD-2025-115711

Malicious code in capella-restart-javascript-prettier npm...

EUVD-2025-114115

Malicious code in eleventy-dotenv-node-config-restart npm...

Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113322

Malicious code in galaxy-karma-restart-wasat npm...

EUVD-2025-122542

Malicious code in restart-eridanus-less-loader-cordelia npm...

EUVD-2025-122526

Malicious code in restart-style-loader-farout-style-loader npm...

EUVD-2025-122860

Malicious code in react-bootstrap-jasmine-restart-jupiter npm...

Malicious code in virgo-zenith-restart-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fe21562e735a0fe98f27a49b5b6b1b0381e2bf1d80496151aac69fb232dfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120509

Malicious code in websockets-global-restart-barnard npm...

EUVD-2025-122521

Malicious code in restart-webdriver-manager-websockets-eleventy npm...

EUVD-2025-114095

Malicious code in eleventy-websockets-restart-telesto npm...

EUVD-2025-122523

Malicious code in restart-ultra-centaurus-babel npm...

Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-lynx-meissa-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9810b5250027e2e99eceb0de4313e2e7fa943040bf86079d15432fba5650741b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111409

Malicious code in markdown-pdf-restart-scripts-yaml npm...

Malicious code in restart-cordelia-equinox-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46b1389b18bb4e7ee0154c9924cc3898400341116f0121ad1e814fb7128204c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149420 Malicious code in websockets-global-restart-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5ce49d06db23468c3abaa5c402e0c91f82c933fede1e8ade09e88eda295f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148689 Malicious code in titan-oberon-restart-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80f54b199c3e81770e49604610ad75bea2f44c7dac5b78f4cb3c6f6a4ce64a36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144130 Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...