EUVD-2025-112149

Malicious code in json-blaze-venus-antd npm...

MAL-2025-146781 Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61de6bef5b68ba25979e912b33bb3e86106a2d722106557cfc8f1fba1d53246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148456 Malicious code in tailwindcss-style-loader-corvus-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 360dda3cbdf0ad64d11cf806ebe3a954d387a100ad64aff35dfb9ca17fcb04b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114896

Malicious code in cosmos-ora-draco-version npm...

EUVD-2025-113045

Malicious code in grunt-lint-lacerta-yakutsk npm...

EUVD-2025-123373

Malicious code in process-enif-event-juno npm...

EUVD-2025-113008

Malicious code in grus-tethys-dagda-pino-pretty npm...

EUVD-2025-116489

Malicious code in astro-phenomic-yakutsk-charon npm...

EUVD-2025-112099

Malicious code in jsonp-writable-grus-cli npm...

EUVD-2025-122756

Malicious code in rehype-docusaurus-nightmare-node-config npm...

EUVD-2025-124310

Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus npm...

EUVD-2025-115020

Malicious code in convict-relay-docusaurus-bootstrap npm...

Malicious code in pipe-docusaurus-docusaurus-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe1086f199d13d933abbfe5f631549cb046e455883a60b41cc0ae56d86f83e1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141650 Malicious code in dione-spica-node-sass-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3914e11caf443d84492b59f56eb90f24c3ae39be33691d79c7ce9ecf0555ad0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147910 Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138938 Malicious code in precise-lime-cougar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b505d68365aa0468e5dd6d13ddd91a058cea2f92664b66344bab4d240ccb57ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

sudo-rs -- Partial password reveal when password timeout occurs

Trifecta Tech Foundation reports: When typing partial passwords but not pressing return for a long time, a password timeout can occur. When this happens, the keys pressed are replayed onto the console...

MAL-2025-136532 Malicious code in rare_seahorse_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a63143e819b4e036f1a5d8bfa56c2668d775a29fdfd924aa0d656f672a609ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-137621 Malicious code in utomo-bika12-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7af638d4f7c4a477146a490bfa4063640e240c3a1cddb8eb1097823b99c30e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tuti-mangga97-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 416afa28a1990e595ca707f6b3648394ebc4da06a6e3c24f03eedea100856c8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...