EUVD-2025-111927

Malicious code in kinetic-spawn-stop-browserify npm...

EUVD-2025-122400

Malicious code in rollup-plugin-tool-await-stop npm...

MAL-2025-146372 Malicious code in polaris-stop-build-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 60a373d1a5eb1fb842a336b3d3996d1ff50d85dbdbcf45ce246eec4e06c9cda3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145381 Malicious code in neptune-stop-semantic-release-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854d36ed66287193682ff19d42027a1746c092392f6048ce77b2adf23c3031f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141131 Malicious code in cors-redis-stop-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b65e1430ff5f3905e4cbe0ad81e4243e56ae4777ae305b05edf937249950fc4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-sadr-package-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2fe98cd66bb030ca2b79aa2740842daa964c75b133ea933f000f870dd53d20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112222

Malicious code in javascript-stop-solis-magellan npm...

EUVD-2025-112320

Malicious code in jabbah-stop-fork-andromeda npm...

Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111282

Malicious code in meissa-sirius-mensa-stop npm...

EUVD-2025-121173

Malicious code in tool-stop-magellan-jekyll npm...

EUVD-2025-115930

Malicious code in buffer-stop-dynamo-docusaurus npm...

EUVD-2025-123912

Malicious code in pavo-stop-aether-indus npm...

Malicious code in kastra-stop-vuetify-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 277a72bd15a20407adf823289d0074b355848164fd8d6bbad0ce7f65c6407b67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

Malicious code in fork-spectron-dependencies-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9f8bbbe5b604f411d47add472ae97a662f6fee39bcab86f107ae9673bf8f6c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120345

Malicious code in xanadu-async-prompts-stop npm...

EUVD-2025-124019

Malicious code in orbit-carpo-stop-heka npm...

EUVD-2025-121618

Malicious code in stop-websockets-spica-antd npm...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...