EUVD-2025-112861

Malicious code in helmet-eleventy-eclipse-slidev npm...

Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148000 Malicious code in slidev-blaze-zenobia-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fd4cde87182f18e48fc64a21b8b3a6224f31cfdab55a301fb10c443b934961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148002 Malicious code in slidev-convict-heka-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e873458060196c11220fa6c0f0f376108963d72dc0968b8880d89d1c286153a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142554 Malicious code in fomalhaut-standard-slidev-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5371bd44f2b30d32f5d87edb2f2d34d2dc0afc29af9daf7af1207e7b2b01439 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146410 Malicious code in postcss-loader-slidev-gulp-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5862d33be04bc9356770af83130173cb0e8ea065555eca3cac16d8de2bd2a5f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140411 Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in slidev-xanadu-xo-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf83cbecd9577fec842ad64f7f847b168a1ad3aafbbfbceda5b0741cc06aac2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143268 Malicious code in helmet-zenobia-jest-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8318772a9d81784738fd36d28c00cf1665ab566d585377a4d5f4987dadde5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111916

Malicious code in koa-neptune-slidev-tool npm...

EUVD-2025-116817

Malicious code in aldebaran-query-slidev-commitlint npm...

EUVD-2025-121921

Malicious code in slidev-duplex-polaris-celeste npm...

EUVD-2025-115265

Malicious code in colors-cors-slidev-loglevel npm...

EUVD-2025-123181

Malicious code in proxima-slidev-spinner-winston npm...

EUVD-2025-120712

Malicious code in vuetify-node-config-cressida-slidev npm...

Malicious code in spica-slidev-ultra-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8279bbd45a36576c365070195f23b84851c549e19d14de6869131e7ad0555cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116861

Malicious code in aether-redis-eris-slidev npm...

EUVD-2025-114476

Malicious code in development-slidev-dotenv-parse-variables-sedna npm...

EUVD-2025-111724

Malicious code in library-slidev-test-radiant npm...

Malicious code in helmet-zenobia-jest-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8318772a9d81784738fd36d28c00cf1665ab566d585377a4d5f4987dadde5f4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...