Malicious code in nodejs-metalsmith-kinetic-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 878d6af5f0a46610edc9311c111f32eee574f8f65046961c73337c1f01e83e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116008

Malicious code in bootes-tool-ophiuchus-webdriverio npm...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116884

Malicious code in adonis-tool-optimize-css-assets-webpack-plugin-spectron npm...

EUVD-2025-111445

Malicious code in magellan-tool-materialize-oauth npm...

EUVD-2025-123479

Malicious code in postgres-pavo-tool-procyon npm...

EUVD-2025-112706

Malicious code in hugo-tool-ignite-materialize npm...

Malicious code in xenon-tool-acamar-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bfa2fd7bf73fe49b6548a52cd6ba56ffcb1fef7d9aed7304babf08c7991af3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111412

Malicious code in markdown-pdf-pavo-lyra-eslint npm...

EUVD-2025-120362

Malicious code in writable-izar-tool-cli npm...

EUVD-2025-124351

Malicious code in nodejs-metalsmith-kinetic-tool npm...

Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116823

Malicious code in aldebaran-grunt-cross-env-heka npm...

EUVD-2025-113729

Malicious code in express-lint-jsonp-nightwatch npm...

EUVD-2025-122400

Malicious code in rollup-plugin-tool-await-stop npm...

EUVD-2025-121173

Malicious code in tool-stop-magellan-jekyll npm...

EUVD-2025-116232

Malicious code in babel-playwright-luna-oauth npm...

EUVD-2025-121174

Malicious code in tool-spectron-flare-repository npm...

Malicious code in forever-tool-achernar-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35badbc2452fccf1a21d3096470faba189442105c382357f1f69ff66eb45921a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...