EUVD-2025-120279

Malicious code in xenon-neptune-phoebe-stream npm...

MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148327 Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fae29f63ab3edd79a6f27157b2a92d2fd2d219f65bf803de9275b448418c9dba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111836

Malicious code in leda-javascript-stream-husky npm...

Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121600

Malicious code in stream-magellan-gemini-webpack npm...

EUVD-2025-111280

Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha npm...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

EUVD-2025-121610

Malicious code in stream-fornax-capella-public npm...

EUVD-2025-114073

Malicious code in enceladus-stream-chai-loglevel npm...

EUVD-2025-121598

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...

EUVD-2025-121597

Malicious code in stream-phoebe-adonis-promise npm...

EUVD-2025-111356

Malicious code in mdx-ariel-stream-yaml npm...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121125

Malicious code in transport-stream-nebula-phoebe npm...

EUVD-2025-115217

Malicious code in comet-stream-gatsby-wezen npm...

EUVD-2025-112561

Malicious code in impulse-react-bootstrap-gacrux-stream npm...

EUVD-2025-121602

Malicious code in stream-lint-magellan-dependencies npm...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...