EUVD-2025-116733

Malicious code in altair-tool-async-passport npm...

EUVD-2025-122065

Malicious code in semantic-ui-tool-fornax-package npm...

EUVD-2025-111764

Malicious code in levels-bootes-charon-tool npm...

EUVD-2025-114941

Malicious code in corvus-tool-eris-uninstall npm...

EUVD-2025-115913

Malicious code in build-sails-postgres-commitizen npm...

EUVD-2025-113729

Malicious code in express-lint-jsonp-nightwatch npm...

EUVD-2025-121191

Malicious code in tool-jabbah-promise-charon npm...

Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116583

Malicious code in apollo-library-metalsmith-tool npm...

EUVD-2025-111916

Malicious code in koa-neptune-slidev-tool npm...

Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116727

Malicious code in andromeda-csrf-got-tool npm...

EUVD-2025-116232

Malicious code in babel-playwright-luna-oauth npm...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141913 Malicious code in electron-eslint-aether-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d1f7548f783c12e5c8d0c42b73eac3624796ce6e399f4eba565d01f3f352840 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149569 Malicious code in writable-izar-tool-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b84bb1c43acd9f7be1bce6187dc6ca90f1e0eda7e28ed138936ede9ac43384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-tool-achernar-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35badbc2452fccf1a21d3096470faba189442105c382357f1f69ff66eb45921a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121174

Malicious code in tool-spectron-flare-repository npm...

EUVD-2025-116717

Malicious code in andromeda-tethys-adonis-tool npm...

MAL-2025-143219 Malicious code in heka-tool-fornax-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f8bd622c042375df8054a2714cc5559b394b0284100a27f4096c2744dab285 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...