MAL-2025-144335 Malicious code in less-loader-toml-private-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 497b8201962b4d3aea7518648553d817621cb4351fa1743b801b30d6659b7352 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148028 Malicious code in soap-nextjs-init-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35e009b07aa96f1cb8004669b245e171142af2ea87fd59386384974b1fd1199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116891

Malicious code in adonis-gulp-ini-soap npm...

EUVD-2025-121910

Malicious code in soap-chakra-ui-phenomic-bootstrap npm...

EUVD-2025-113740

Malicious code in express-cassini-warp-soap npm...

EUVD-2025-122739

Malicious code in rehype-run-script-soap-process npm...

Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111778

Malicious code in less-loader-toml-private-soap npm...

EUVD-2025-112882

Malicious code in helios-europa-soap-europa npm...

Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121886

Malicious code in soap-vega-hydra-jasmine npm...

EUVD-2025-121657

Malicious code in start-cosmos-soap-style-loader npm...

EUVD-2025-121891

Malicious code in soap-sass-loader-sirius-cache npm...

Malicious code in soap-sass-loader-sirius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c32a09e8e53f322f5f79220d387b7048fd9677cf8dcdbd54dacdef9d18be785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124290

Malicious code in non-blocking-writable-soap-element-ui npm...

EUVD-2025-121888

Malicious code in soap-taurus-alphard-await npm...

EUVD-2025-115932

Malicious code in buffer-soap-vortex-mini-css-extract-plugin npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...