Malicious code in lint-jabbah-elektra-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26b1393ad21c122c488010604c363c0c5385feb33514676d1aaa1a267fa1ed98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112640

Malicious code in hyperion-eslint-config-oberon-babel npm...

EUVD-2025-114685

Malicious code in cz-conventional-changelog-markdown-metalsmith-commitizen npm...

EUVD-2025-120707

Malicious code in vuetify-tool-markdown-apollo npm...

MAL-2025-141168 Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148743 Malicious code in tool-magellan-weywot-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bff21943a5c6a762c7322a56b92c42ea054dd9db5fa7875e2395c6ad5b98625c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123478

Malicious code in postgres-perseus-karma-tool npm...

EUVD-2025-121178

Malicious code in tool-quark-andromeda-schema npm...

Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-umbra-spectron-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 536e47fdfce250fe64bd38d1a246f1fe8af603ae7131fd0af3df43f6ca78d261 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122358

Malicious code in sadr-jest-tool-wezen npm...

EUVD-2025-121175

Malicious code in tool-semantic-ui-loop-eslint-config npm...

MAL-2025-146236 Malicious code in pino-pretty-hyperion-terser-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df02f906063e61b6da517aab704a23c427a3b32691080d2fd2055d4a068aefe8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148028 Malicious code in soap-nextjs-init-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f35e009b07aa96f1cb8004669b245e171142af2ea87fd59386384974b1fd1199 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

EUVD-2025-115298

Malicious code in cli-sedna-xo-tool npm...

MAL-2025-145555 Malicious code in node-sass-tool-resolvers-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fe9d82b37f041e55c54c357d2b3f2c7cac2a2ca7af9a206f536e6ad03b700b7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...