EUVD-2025-121630

Malicious code in stop-flare-graphql-webdriverio npm...

EUVD-2025-115336

Malicious code in chromedriver-fornax-stop-apex npm...

EUVD-2025-115961

Malicious code in browserify-stop-sagitta-sirius npm...

EUVD-2025-121640

Malicious code in stop-aldebaran-sedna-luna npm...

Malicious code in stop-slides-mutation-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16cf9fc366dd5ff0fe93b35dc17840cbedf1102436fa9b3b5ef24c002963679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-playwright-proxima-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca7ce5a8acc186e4762e4831633d633f82fe9434b7428f24bfe3ed5bbaea92da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121631

Malicious code in stop-firebase-mira-ophiuchus npm...

EUVD-2025-121616

Malicious code in stop-zenith-auriga-dotenv-parse-variables npm...

EUVD-2025-123178

Malicious code in proxima-stop-chariklo-puppeteer npm...

Malicious code in zephyr-lynx-stop-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198e05e3ff5f3efe1c27864a86183b3a8341b6df02cd8b7e97369ce5dd3f42d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111824

Malicious code in leda-regulus-standard-stop npm...

EUVD-2025-116319

Malicious code in avior-rollup-stop-zephyr npm...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121643

Malicious code in start-stop-terser-hermes npm...

Malicious code in stop-google-magellan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b7160e38108659c54f1103cd1042f9139fba98b7b6fdbadbf9c5691b01e5cd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111675

Malicious code in lint-hapi-stop-nightwatch npm...

Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115539

Malicious code in ceres-hydra-rocket-stop npm...

EUVD-2025-113720

Malicious code in express-pyxis-sails-stop npm...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...