EUVD-2025-111327

Malicious code in meissa-altair-tool-node-sass npm...

EUVD-2025-113599

Malicious code in firebase-sagitta-tool-corvus npm...

EUVD-2025-120952

Malicious code in unuk-chariklo-pm2-tool npm...

EUVD-2025-116893

Malicious code in adonis-barnard-commitlint-config-angular-tool npm...

Malicious code in carpo-tool-query-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d85076a23d978552389bda01ad653402407b5c31a5709662db6c7e2f7bf4acb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ora-europa-tool-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e006f42e194527ca2cc8573e612feb59b34bb39906c9d9544474f1576887f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121201

Malicious code in tool-andromeda-kinetic-scripts npm...

EUVD-2025-121200

Malicious code in tool-aquarius-juno-pipe npm...

EUVD-2025-121172

Malicious code in tool-terser-avior-less npm...

EUVD-2025-121194

Malicious code in tool-fornax-polaris-install npm...

EUVD-2025-114346

Malicious code in dotenv-safe-nestjs-jest-tool npm...

EUVD-2025-113499

Malicious code in fornax-commitlint-tool-docusaurus npm...

EUVD-2025-121897

Malicious code in soap-nextjs-init-tool npm...

MAL-2025-141596 Malicious code in despina-fusion-typeorm-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40abb8a24d7c690b5112addea229e5308d47adda807501e929ab97cdaacc57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-commitlint-tool-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c66a4fed949a6c247a8e793979fb01e4d622f1b18b9cbe545578ff45b4dce3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123400

Malicious code in prettier-stylelint-tool-ora-solis npm...

Malicious code in corvus-tool-eris-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6c70e245e0236f09ab23fa8be3ab93de3e17af4507ca9c2ea53298eb3bf1cc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-alphard-tool-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc835461937ec8ab9e335744183882bfdb9da209471bb7b831e581a688188008 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-sagitta-tool-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9f0e4b922b003c40ad9a7753fe86040398d2220a37c9273a23abf24bcd4318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...