EUVD-2025-115978

Malicious code in bootstrap-uglify-js-proxima-transform npm...

EUVD-2025-116838

Malicious code in airbnb-transform-apollo-terser-webpack-plugin npm...

MAL-2025-141531 Malicious code in delphinus-transform-event-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0752736ff183a84118d0c03070f6e93fb04f2b02c74e99d9c655488c1f9a590e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121158

Malicious code in transform-norma-flare-carpo npm...

EUVD-2025-115440

Malicious code in changelog-cosmos-sync-transform npm...

MAL-2025-148772 Malicious code in transform-publish-sedna-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0a03fc8338b4b798f1a5808c0388729affd3e1aaf3ffed404918845befbbdb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139348 Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115162

Malicious code in commitizen-transform-algol-betelgeuse npm...

Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-111278

Malicious code in meissa-supervisor-markdown-transform npm...

EUVD-2025-112084

Malicious code in juno-levels-bunyan-transform npm...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-transform-apex-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8329d07d153602e53d39e6ab9792a42a05d33fe8f6d9b74237d2d37676bac1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-backend-webdriver-mocha-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee762578e81ff651deb97f909d6088e265292074eacd07e99df87a2e09c9bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...