EUVD-2025-120351

Malicious code in writable-supervisor-proxima-solis npm...

EUVD-2025-113652

Malicious code in fetch-supervisor-phoenix-octans npm...

EUVD-2025-123240

Malicious code in protractor-dynamo-lyra-supervisor npm...

EUVD-2025-113419

Malicious code in framework-react-bootstrap-alphard-supervisor npm...

EUVD-2025-120830

Malicious code in vega-supervisor-exec-taurus npm...

EUVD-2025-123274

Malicious code in promise-rimraf-supervisor-graphql npm...

EUVD-2025-111613

Malicious code in local-xo-supervisor-prettier-stylelint npm...

EUVD-2025-120350

Malicious code in writable-supervisor-zenobia-blaze npm...

EUVD-2025-114029

Malicious code in envconfig-neptune-supervisor-lint npm...

EUVD-2025-115296

Malicious code in cli-supervisor-meissa-transform npm...

EUVD-2025-124666

Malicious code in mysql-leda-supervisor-cordelia npm...

EUVD-2025-111370

Malicious code in materialize-lint-staged-supervisor-astro npm...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142250 Malicious code in eslint-supervisor-rollup-plugin-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35eaf1dd0ae02b839f771c4647f77510a80e88ff4c7236de32a826f8b817cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147456 Malicious code in rimraf-ophiuchus-supervisor-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62d161a75cd81a68198bf33a6437867de29c56abdc2d8d0f24e783ec8aa5a713 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112505

Malicious code in ini-supervisor-ini-enif npm...

MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148951 Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147446 Malicious code in rimraf-carpo-eleventy-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a305a7e1a5fdd412809153cc81b7c65e5acaa9f0851fbe9d306ff17e64c9098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...