MAL-2025-146313 Malicious code in pm2-sqlite-got-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d538eb2a77f07a4d82c2dc92a67f5740e341cb37992ad8e0cac69335ae315904 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121603

Malicious code in stream-link-stop-csrf npm...

EUVD-2025-114618

Malicious code in deimos-cressida-kronos-stop npm...

MAL-2025-141125 Malicious code in cors-ganymede-typeorm-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64aedef6ebfc41d40cb33e4a35f8db70ca590c8af93ee332b2eb454941e6fb14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111675

Malicious code in lint-hapi-stop-nightwatch npm...

EUVD-2025-112584

Malicious code in ignite-stop-castor-triton npm...

EUVD-2025-112571

Malicious code in impulse-event-stop-celeste npm...

EUVD-2025-112451

Malicious code in inquirer-stop-spectron-tethys npm...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-112073

Malicious code in juno-superagent-stop-antares npm...

EUVD-2025-112034

Malicious code in jwt-magellan-sedna-stop npm...

EUVD-2025-111824

Malicious code in leda-regulus-standard-stop npm...

Malicious code in avior-rollup-stop-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edddc936cb28966c53e967414bf4652f3bff127a82fc2a0f7328beca98b0b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changelog-stop-spectron-webdriver-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e35232b2768c3bb1baf79865a9e648987758ad19e7705710da8c61613fec77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dotenv-safe-hermes-config-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248187bf030771f9566389c31563af67e13a9128c4ca8fa87fd4661d089c596d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-meteor-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670b62a4cb55228c20ad958da47c271f028b2a55a608b305e28381a75d5acb6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in express-pyxis-sails-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1185fc0d42439e9df48781b08bbf46abcbb40b9f5715d77e835e5d53d1bbd02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...