EUVD-2025-123418

Malicious code in prettier-soap-io-hermes npm...

EUVD-2025-114268

Malicious code in dynamo-ursa-soap-update npm...

EUVD-2025-124888

Malicious code in miranda-elektra-epimetheus-soap npm...

Malicious code in husky-upgrade-soap-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601c73ad9ca5a7963e14be01345e21f536a67da6422a2d129b0e73e809c78799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-gacrux-test-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f146490badaa1b12611a8763498d0c26ee5d80e1f64f417b1d5b7cc98eeeaabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114177

Malicious code in electron-soap-magellan-heka npm...

Malicious code in semantic-ui-gridsome-soap-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a0060f351631a479d5a01ada81ee536b7742cf61bf5d08e1fa70755ea66b574 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chakra-ui-vega-express-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20c0df3b2ac23be1e355e72eb882ad33832dee620205b49d584c3786346b4f50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121890

Malicious code in soap-spica-gemini-ganymede npm...

EUVD-2025-115613

Malicious code in castor-reveal-md-react-bootstrap-soap npm...

EUVD-2025-114888

Malicious code in cosmos-soap-pegasus-package npm...

EUVD-2025-122874

Malicious code in rate-limiter-soap-colors-testcafe npm...

Malicious code in adonis-gulp-ini-soap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ff4c41703f7fa7c297b526ca575aaa468f04fe7b9277ccc7c91c4e74dfd5d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124891

Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora npm...

EUVD-2025-116735

Malicious code in altair-soap-lacerta-kastra npm...

MAL-2025-147619 Malicious code in sagitta-soap-jabbah-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce1eac91ce5b3dd1ba6b6ad4dc0e56d557a5b7264db95f7ee63c57767b13c5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144227 Malicious code in kronos-soap-mongoose-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2a7487eb0f4716eb5160cc1c8d601510a3fadcc5d74c85426652aaf1df9303 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147616 Malicious code in sagitta-relay-soap-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af375c1cc7e3d5daa24087f91e3a575c2cc62fd208b8c08caabf86453888112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148030 Malicious code in soap-pavo-terser-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9ffff8cf6a504a54d7a9a9b8193efbb4dfc00ae43a56bc384e678ccea487576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...