EUVD-2025-177944

Malicious code in markdownlint-rollup-loglevel-toml npm...

EUVD-2025-175931

Malicious code in toml-apollo-materialize-hexo npm...

EUVD-2025-180014

Malicious code in blueshift-toml-bellatrix-blueshift npm...

EUVD-2025-177479

Malicious code in odin-toml-element-ui-flare npm...

EUVD-2025-178588

Malicious code in hawkingradiation-jupiter-toml-comet npm...

Malicious code in markdownlint-rollup-loglevel-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc9bcd9f7f8ab3bac1cfef2c4e32342014982407e7e69dedb4ebd4e42256d0e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177081

Malicious code in prettier-cordelia-npm-toml npm...

Malicious code in electron-pm2-toml-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f39fb8a9d75395b1785a187dc32fd7123d42ea214d0d3cd4f9526ff421b0a685 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175924

Malicious code in toml-superflare-rollup-algol npm...

EUVD-2025-179861

Malicious code in castor-cosmology-planetology-toml npm...

EUVD-2025-178492

Malicious code in husky-build-toml-troposphere npm...

EUVD-2025-178586

Malicious code in hawkingradiation-ora-celeste-toml npm...

EUVD-2025-177151

Malicious code in pipe-pino-pretty-toml-meteor npm...

EUVD-2025-178509

Malicious code in html-webpack-plugin-deimos-toml-command npm...

EUVD-2025-175929

Malicious code in toml-ethology-cordelia-carpo npm...

MAL-2025-188807 Malicious code in prettier-plugin-markdown-toml-reveal-md-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff999735f3feba34d19df5a1438749dc0508d8d6210fbc23713452c707547b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189948 Malicious code in toml-jwt-docusaurus-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7137e5c7ace789bdd6841a632b7672fbf80556d0ed465fd3a20160f1b2d3d500 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186021 Malicious code in castor-cosmology-planetology-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0793b946fb175d66296827fcb218b871018110b0a8b6cfd2e04dfd5583e18fea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-toml-iota-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7c32721632d64f23304482bb6565212889262dac6c7be4198546fa527e9be39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...