EUVD-2025-122107

Malicious code in selenium-stream-fetch-deneb npm...

Malicious code in prompts-zenobia-promise-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2597941e827037dc95c37d6ce60f562a41e408f869d847205cfe66fc276023d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ultra-stream-cli-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8919da0e5107515453a1601a96d63ff99ed9feb3133d9d1590a4a91432c96de2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-oauth-framework-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21dce1782e99ecf2a9a1ac060d68897c127bf998539a101ddbcb4e03d4c4e560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121598

Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar npm...

MAL-2025-148311 Malicious code in stream-bunyan-selenium-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bbf6cfd3f3b1fe6e04e80d1120452bdc3262f19277791c0d067efd9c340506c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141755 Malicious code in dotenv-safe-hyperion-karma-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41545b93f714faf7d695c18bdad4365cb382c7a187442a99e2252a943a2c2cdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115069

Malicious code in config-sync-stream-jasmine npm...

Malicious code in stream-impulse-halley-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00f43ed0fe224677a8bd0b3ddeca70ab4093b2d2108e29be6a7fb5bd8c529553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-stream-rest-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 738247151f180588c56546db685b85a7ed478e77a9961371b2a46f8c2610da6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148312 Malicious code in stream-chalk-elara-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e8742ef7707e771c8ceaf7750f9e26d84d6f5e2fa92e9bf32fdaa0178bef63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121599

Malicious code in stream-mysql-typeorm-halley npm...

EUVD-2025-121613

Malicious code in stream-chalk-elara-node-config npm...

EUVD-2025-121607

Malicious code in stream-graphql-levels-sedna npm...

EUVD-2025-111780

Malicious code in less-loader-stream-publish-aurora npm...

EUVD-2025-121601

Malicious code in stream-loop-parcel-npm npm...

Malicious code in command-gulp-stream-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ce8a4d9de37e9592ba9e3c891cf04f83429c155a22194a21fdf1bb9a7af61ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...