MAL-2025-140425 Malicious code in carina-rocket-shelljs-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87fececdbfe1c01f7b543ecf0508dc2cdcadff80d76f5c99691cfd4d27abfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124456

Malicious code in nightwatch-element-ui-wezen-shelljs npm...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146366 Malicious code in polaris-shelljs-jekyll-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de091a3968f27ce74c81fbe514c2fa98c46ffdd8b63a1a10948c72140895732c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147927 Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2022-0448

Malicious code in bioql PyPI...

Malicious code in shelljs-quasarjet-cryovolcano-stop (npm)

The package shelljs-quasarjet-cryovolcano-stop was found to contain malicious code...

Malicious code in cli-shelljs-exoplanetology-indus (npm)

The package cli-shelljs-exoplanetology-indus was found to contain malicious code...

Malicious code in shelljs-neptunology-pegasus-sedna (npm)

The package shelljs-neptunology-pegasus-sedna was found to contain malicious code...

MAL-2025-46007 Malicious code in shelljs-quasarjet-cryovolcano-stop (npm)

The package shelljs-quasarjet-cryovolcano-stop was found to contain malicious code...

Malicious code in morgan-shelljs-outercore-izar (npm)

The package morgan-shelljs-outercore-izar was found to contain malicious code...

Malicious code in brane-taphonomy-darkmatter-shelljs (npm)

The package brane-taphonomy-darkmatter-shelljs was found to contain malicious code...

MAL-2025-45235 Malicious code in morgan-shelljs-outercore-izar (npm)

The package morgan-shelljs-outercore-izar was found to contain malicious code...

MAL-2025-43829 Malicious code in cli-shelljs-exoplanetology-indus (npm)

The package cli-shelljs-exoplanetology-indus was found to contain malicious code...

MAL-2025-46006 Malicious code in shelljs-neptunology-pegasus-sedna (npm)

The package shelljs-neptunology-pegasus-sedna was found to contain malicious code...

MAL-2025-43656 Malicious code in brane-taphonomy-darkmatter-shelljs (npm)

The package brane-taphonomy-darkmatter-shelljs was found to contain malicious code...

Malicious code in geochemistry-shelljs-terser-webpack-plugin-koa (npm)

The package geochemistry-shelljs-terser-webpack-plugin-koa was found to contain malicious code...