EUVD-2025-179996

Malicious code in bootes-transform-nuxtjs-proxima npm...

MAL-2025-187303 Malicious code in heka-buffer-install-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d173a46b2222709ebde51168c15d95d657b1e4e9bdebe6edb1073438c8838fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189965 Malicious code in transform-forever-quantum-computing-archaeoastronomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 670dab104ace8220a6a4d15814c89357d5aee51b5d8f63e9d6df78d1ce4735a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180231

Malicious code in aurora-transform-protoplanetarydisk-iota npm...

EUVD-2025-178234

Malicious code in jwt-polaris-accretion-transform npm...

EUVD-2025-177695

Malicious code in native-transform-nightmare-polaris npm...

EUVD-2025-177084

Malicious code in postgres-promise-transform-farout npm...

EUVD-2025-175914

Malicious code in transform-blitz-element-ui-helios npm...

EUVD-2025-178045

Malicious code in local-farout-transform-chai npm...

Malicious code in graphql-elektra-triton-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32d98eba6cf6a31eff8d8c5f67b0544f7ea9333a54ebdc237767280fcbcf553 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175911

Malicious code in transform-ethology-weywot-style-loader npm...

MAL-2025-155087 Malicious code in fini-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9723f4ea1a4acd46f88cd3f7bdad51a3bb81919da93440921d0d6cd0cc906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155088 Malicious code in finis-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ddb8f51db08d9f479588e0b7f0688a0b9e0f8a3d64fbe4910f2b286cdd33bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finis-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ddb8f51db08d9f479588e0b7f0688a0b9e0f8a3d64fbe4910f2b286cdd33bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fini-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fa9723f4ea1a4acd46f88cd3f7bdad51a3bb81919da93440921d0d6cd0cc906 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a06558798bb549a1148be9f31b651cb0bd06d906aadc8f191995aae6cb2dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121150

Malicious code in transform-writable-farout-publish npm...

Malicious code in transform-xo-eridanus-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdb820e1534cb90c0d94a2ead0284f4c60efdbb87ab1d40999e2915c495e6557 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121206

Malicious code in toml-transform-colors-uninstall npm...

EUVD-2025-121157

Malicious code in transform-pegasus-browserify-docusaurus npm...