Malicious code in koa-husky-indus-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9f7e42701036c4e7b90136d710172087d9eeb7bf8d869ff9064aeddd8aceca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121190

Malicious code in tool-kronos-cosmos-sass-loader npm...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

EUVD-2025-122043

Malicious code in sequelize-tool-gemini-arcturus npm...

EUVD-2025-112640

Malicious code in hyperion-eslint-config-oberon-babel npm...

EUVD-2025-114685

Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...

EUVD-2025-113234

Malicious code in geckodriver-pino-cz-conventional-changelog-tool npm...

EUVD-2025-121198

Malicious code in tool-cache-jasmine-link npm...

EUVD-2025-121818

Malicious code in spawn-tool-concurrently-umbra npm...

Malicious code in tool-command-geckodriver-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3d4c1dfd04a531ec9f0f8abdf611775cc1f6fb6b997f973bad24c056990bfcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-apollo-radiant-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d5f932b5ebb57daa130c09dd46c1291c44a6c1335243a2913ffd76e0abde8be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dione-tool-exec-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb0ede422a77bce351eab9cf913afa16a03cefcaf54961116943e70c3e322778 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121178

Malicious code in tool-quark-andromeda-schema npm...

EUVD-2025-124595

Malicious code in nconf-prettier-jekyll-jasmine npm...

EUVD-2025-124171

Malicious code in oberon-parcel-titan-tool npm...

EUVD-2025-123772

Malicious code in phoebe-dotenv-parse-variables-command-tool npm...

EUVD-2025-123478

Malicious code in postgres-perseus-karma-tool npm...

MAL-2025-148028 Malicious code in soap-nextjs-init-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35e009b07aa96f1cb8004669b245e171142af2ea87fd59386384974b1fd1199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145555 Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...