EUVD-2025-176553

Malicious code in sagitta-shelljs-halley-grunt npm...

EUVD-2025-176400

Malicious code in shelljs-package-writable-jabbah npm...

Malicious code in sagitta-shelljs-halley-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27d14c78f0650cc9e36a6a09704b5376e65f49f575b3bcc650e67f28f0dbb37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-barnard-juno-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dbf5daee4a63bb5da7d2edd25d7ce8d9d7bc3d058330917f28aa7374a6ef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179809

Malicious code in ceres-petrology-callisto-shelljs npm...

EUVD-2025-178412

Malicious code in ini-barnard-juno-shelljs npm...

MAL-2025-188795 Malicious code in prettier-despina-gacrux-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fec6deb30bd5cd5a5e545dce825592415f1f20a4686a084e6cb1c5169e3902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176402

Malicious code in shelljs-biotechnology-leda-europa npm...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176484

Malicious code in scripts-shelljs-quark-gridsome npm...

MAL-2025-186073 Malicious code in ceres-petrology-callisto-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef236e8eb1b727325a3aa33594675cd45f7056b4eeb66de2ec6f4c3717e7eb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186737 Malicious code in enceladus-shelljs-cryonics-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d57706f2890df2c5e6d5e2d2c8879191da18cd3bc37af5c20d75071e63233fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189475 Malicious code in shelljs-package-writable-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f60830a143e445f6febb17ec8af079069f1883139d63dfad0461f1d08e9008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122938

Malicious code in query-webdriver-mocha-version-shelljs npm...

EUVD-2025-122014

Malicious code in shelljs-bootes-regulus-sedna npm...

EUVD-2025-112723

Malicious code in hugo-io-commitizen-shelljs npm...

EUVD-2025-122879

Malicious code in rate-limiter-lynx-shelljs-gulp npm...

EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

EUVD-2025-122413

Malicious code in rollup-plugin-async-shelljs-procyon npm...

EUVD-2025-124541

Malicious code in neptune-shelljs-mysql-local npm...