MAL-2025-147185 Malicious code in rehype-socketio-arcturus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517b206758d062405fc1f5a4cb182194e74d2f115f80f5bea7031a861c4a0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144129 Malicious code in kastra-pyxis-materialize-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50efa6b14b4153be771f26ea3685b03159c5bb0e95dab062461c4e6da40efce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148050 Malicious code in socketio-eris-delphinus-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc71ddc3dcf1582b910c6e15c26a077a5a4e6f1e21b3f00fd3f1b8e02ee14dff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115377

Malicious code in charon-polaris-socketio-configstore npm...

EUVD-2025-114463

Malicious code in dione-nashira-socketio-sagitta npm...

EUVD-2025-116551

Malicious code in aquarius-socketio-jupiter-iota npm...

EUVD-2025-124600

Malicious code in nconf-janus-commitizen-socketio npm...

EUVD-2025-122441

Malicious code in rocket-socketio-altair-module npm...

Malicious code in carina-loopback-zenith-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a938276cf14613f10aa6d135009c7b24f7fb2e652a0db5c52685da55ce264972 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116281

Malicious code in axios-canopus-yildun-socketio npm...

Malicious code in rehype-socketio-arcturus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517b206758d062405fc1f5a4cb182194e74d2f115f80f5bea7031a861c4a0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-socketio-loglevel-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 260abb768f8062126b91ed7c1e0822ea7d2cd0490e64c0ef6d0235f618e5ccf1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120238

Malicious code in xenos-vuepress-socketio-karma npm...

EUVD-2025-113900

Malicious code in eslint-config-socketio-development-event npm...

EUVD-2025-121872

Malicious code in socketio-fetch-jekyll-bellatrix npm...

EUVD-2025-111289

Malicious code in meissa-pm2-middleware-socketio npm...

EUVD-2025-122737

Malicious code in rehype-socketio-arcturus-ursa npm...

Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...