EUVD-2025-122381

Malicious code in run-script-charon-rigel-koa npm...

EUVD-2025-111772

Malicious code in less-non-blocking-run-script-xanthus npm...

EUVD-2025-122374

Malicious code in run-script-mysql-antd-csv npm...

Malicious code in got-run-script-proxima-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfa04a34a8e56c5c772f14564f419592876e974653aa8279f0dfc3c83c0256b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-run-script-nashira-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7361ddf24b24372d3f7d805c9eb58615f9f41cd1281ea692b6ebc64d1b3c543e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120568

Malicious code in webdriver-mocha-run-script-kastra-dactyl npm...

EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

EUVD-2025-112454

Malicious code in inquirer-remark-upgrade-run-script npm...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121161

Malicious code in transform-lyra-run-script-cosmiconfig npm...

EUVD-2025-122371

Malicious code in run-script-pyxis-chromedriver-sqlite npm...

MAL-2025-140998 Malicious code in commitlint-zenobia-run-script-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16404836c6f02879318bd5e43d055f2dac1eb55ecd652eff9934d63f3c3f7e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122369

Malicious code in run-script-testcafe-leda-update npm...

EUVD-2025-122817

Malicious code in redis-izar-react-bootstrap-run-script npm...

EUVD-2025-121645

Malicious code in start-run-script-sagitta-proxima npm...

EUVD-2025-116586

Malicious code in apollo-indus-run-script-lyra npm...

EUVD-2025-122383

Malicious code in run-script-bulma-jupiter-magellan npm...

EUVD-2025-111251

Malicious code in mensa-run-script-got-lyra npm...