EUVD-2025-121614

Malicious code in stream-bunyan-selenium-fornax npm...

EUVD-2025-121609

Malicious code in stream-galaxy-loopback-rocket npm...

EUVD-2025-121607

Malicious code in stream-graphql-levels-sedna npm...

EUVD-2025-121602

Malicious code in stream-lint-magellan-dependencies npm...

EUVD-2025-121596

Malicious code in stream-run-script-got-morgan npm...

EUVD-2025-122788

Malicious code in registry-server-jekyll-stream npm...

EUVD-2025-123688

Malicious code in pino-pretty-gemini-blaze-stream npm...

EUVD-2025-124538

Malicious code in neptune-stream-toml-postcss-loader npm...

EUVD-2025-124190

Malicious code in oauth-figures-thuban-stream npm...

Malicious code in stream-galaxy-loopback-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d45ae83d454c1dad43cba0a2f8238b07627a3bf01f9330bd8c4367fc4f2241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123659

Malicious code in pipe-dynamo-nodejs-stream npm...

Malicious code in hydra-stream-express-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff343e869eea3d3afef8aa2d1b4b440a33ca6d31bae23e02944b00880df9f07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca689f742b94ba4a8fd5eb5c63fabe4993fa211a15abc1805caa3180a7eb351c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115579

Malicious code in centauri-element-ui-stream-sass-loader npm...

EUVD-2025-120612

Malicious code in webdriver-manager-eslint-plugin-stream-private npm...

EUVD-2025-115217

Malicious code in comet-stream-gatsby-wezen npm...

Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prompts-zenobia-promise-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2597941e827037dc95c37d6ce60f562a41e408f869d847205cfe66fc276023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120279

Malicious code in xenon-neptune-phoebe-stream npm...

Malicious code in electron-builder-hydra-mensa-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 733f1c84e1e35649320ac770b0244b8355e49429b646695a80cfddf7197fa907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...