EUVD-2025-121993

Malicious code in shelljs-ultra-venus-stop npm...

Malicious code in fork-spectron-dependencies-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f8bbbe5b604f411d47add472ae97a662f6fee39bcab86f107ae9673bf8f6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-121638

Malicious code in stop-bellatrix-sequelize-dotenv-safe npm...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

EUVD-2025-124019

Malicious code in orbit-carpo-stop-heka npm...

EUVD-2025-124004

Malicious code in orbit-venus-stop-jovian npm...

EUVD-2025-124451

Malicious code in nightwatch-iota-oberon-stop npm...

EUVD-2025-112222

Malicious code in javascript-stop-solis-magellan npm...

EUVD-2025-123608

Malicious code in pm2-sqlite-got-stop npm...

Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148291 Malicious code in stop-colors-native-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab01a52a3f41b139889ce3357bc601b3f2ca49d5a2913f21185e024b9c3e0aba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112784

Malicious code in hermes-stop-uglify-js-axios npm...

EUVD-2025-112571

Malicious code in impulse-event-stop-celeste npm...

MAL-2025-149482 Malicious code in winston-cache-stop-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111282

Malicious code in meissa-sirius-mensa-stop npm...

MAL-2025-149296 Malicious code in wasat-npm-frontend-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ed7cb4dd2e77f6c32dce0cf92384b480709d841e5b7d1d22b7f7ac3f73bedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146701 Malicious code in protractor-ursa-stop-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 013a698a464cce2a500f25f760be7bc42e4cbb17330e537716c604dc84004c4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...