EUVD-2025-113749

Malicious code in exec-scorpius-toml-transform npm...

EUVD-2025-121222

Malicious code in toml-convict-lyra-helios npm...

EUVD-2025-111778

Malicious code in less-loader-toml-private-soap npm...

EUVD-2025-121217

Malicious code in toml-hexo-xml-capella npm...

EUVD-2025-121211

Malicious code in toml-lynx-pavo-sadr npm...

Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115744

Malicious code in canopus-kronos-arcturus-toml npm...

EUVD-2025-121218

Malicious code in toml-flare-shelljs-subscription npm...

Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120803

Malicious code in venus-toml-google-csrf npm...

EUVD-2025-121203

Malicious code in toml-version-docusaurus-enif npm...

Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112707

Malicious code in hugo-toml-blitz-dotenv npm...

MAL-2025-144474 Malicious code in lint-toml-janus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4d74b1b010c2a53741c5653bbaf376160ff451dbfab3dc1da0141aae6b48afe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111640

Malicious code in lint-toml-janus-cross-env npm...

EUVD-2025-124226

Malicious code in nuxtjs-astro-dotenv-toml npm...

EUVD-2025-124305

Malicious code in non-blocking-meissa-toml-vortex npm...

EUVD-2025-122081

Malicious code in semantic-ui-concurrently-enceladus-toml npm...

MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143813 Malicious code in janus-indus-slides-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef056ed0baca29f83009d0e395c62567862980b09b39b60559331c2dd19576e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...