EUVD-2025-123634

Malicious code in playwright-stream-playwright-acamar npm...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-neptune-phoebe-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ebcad60ecae9335fe3daf8c0d9ecc0eda8d0e71001fa87a10a5b9681591a224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111780

Malicious code in less-loader-stream-publish-aurora npm...

Malicious code in stream-galaxy-loopback-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5d45ae83d454c1dad43cba0a2f8238b07627a3bf01f9330bd8c4367fc4f2241 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122342

Malicious code in sagitta-await-nightwatch-stream npm...

Malicious code in mysql-janus-non-blocking-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3e967f7af12b0fb31e73a1d41f54d76ec7e17f227ad7b707c8debcfc5dccdbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113520

Malicious code in fork-less-loader-stream-spinner npm...

EUVD-2025-123245

Malicious code in prompts-zenobia-promise-stream npm...

EUVD-2025-115501

Malicious code in chai-semantic-ui-sagitta-stream npm...

EUVD-2025-116162

Malicious code in bellatrix-jsonp-octans-stream npm...

EUVD-2025-112525

Malicious code in ini-duplex-mini-css-extract-plugin-stream npm...

EUVD-2025-116228

Malicious code in babel-stream-loop-corvus npm...

EUVD-2025-122788

Malicious code in registry-server-jekyll-stream npm...

MAL-2025-149221 Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144426 Malicious code in link-stream-global-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f092b3a5f594f4680772e986c332edf9177a9c2c59021a558a60473af3db464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146616 Malicious code in procyon-stream-registry-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 681ef514413c1e789bfdffdc7059f185ece03f8909580844f7250a0342b40bf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stream-loop-parcel-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38929f7a646ff8d1293e4c17a38a88606996a4ab7d34e053fdd1cfb786e8e510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143237 Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140650 Malicious code in chalk-miranda-stream-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c49e37c6859cc4ea8aaa71c43a84df6a1e639a482bc71eac042856a46b547299 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...