EUVD-2025-111236

Malicious code in metalsmith-jabbah-sails-acamar npm...

EUVD-2025-112657

Malicious code in hydra-sails-jekyll-pm2 npm...

EUVD-2025-112485

Malicious code in init-ora-cypress-sails npm...

EUVD-2025-112336

Malicious code in jabbah-foundation-auth-sails npm...

EUVD-2025-112281

Malicious code in janus-sails-repository-repository npm...

EUVD-2025-112025

Malicious code in jwt-test-elektra-sails npm...

EUVD-2025-111816

Malicious code in leda-terser-element-ui-sails npm...

Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in frontend-module-tailwindcss-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b0a42dd3cdb3164f9a7e9e88a05a7fdb8d309d11dc69e5b66054ef4e34eac8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hexo-sails-element-ui-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f497ce3381fb671b0eeca370a269ef78cb9604d6165313910b3d753c12db56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de5c6028b26ad9a9940e7d720b72f2c73610b323b7f8177b16517880b5f1849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in janus-sails-repository-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b717e4890005e4ec07be65f1916406d5749e4ad38235d36ddba0bc9d3582e320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in metalsmith-jabbah-sails-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56b31ae985f128fe19af9bee9ae4011ab98d52966a366502d7d9f65c3788a3a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quito-kronos-sails-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9e7f6c449585bbf20e538516ed1eaa838c922df2fa2da21a0f4b08d049d43e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in react-bootstrap-sails-websockets-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45f6d5f4858ab3c8a9dcd9c2ce14f334729ff48ad9207ef8a1e979a84de8d585 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-aquarius-elektra-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98a55c0fac4c3569449fdc116417d05fb97f310e65f036c7e35510fb8e9d4bfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sails-changelog-gulp-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a607cb7ad8c3dec200f7bf484afda3b782c0dbb18494d0b44af73cd797bd4e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...