EUVD-2025-123561

Malicious code in polaris-playwright-pino-pretty-transform npm...

Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113805

Malicious code in event-axios-elektra-transform npm...

EUVD-2025-121151

Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto npm...

EUVD-2025-115978

Malicious code in bootstrap-uglify-js-proxima-transform npm...

EUVD-2025-116440

Malicious code in atlas-transform-taurus-xanthus npm...

EUVD-2025-112084

Malicious code in juno-levels-bunyan-transform npm...

EUVD-2025-111278

Malicious code in meissa-supervisor-markdown-transform npm...

Malicious code in polaris-transform-firebase-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91201b5cfb0d545ae12aa908cc7d5b24f7c6833ace2ac82fb6c44e9dce3b5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149717 Malicious code in xerxes-repository-transform-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084a137d2be3db55a1f0664186668da911432bc4f0ec5e2a3c84ef7f34d9bb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123665

Malicious code in pino-xanthus-got-transform npm...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-121156

Malicious code in transform-publish-sedna-cressida npm...

EUVD-2025-121619

Malicious code in stop-transform-ultra-ultra npm...

EUVD-2025-115025

Malicious code in convict-promise-transform-weywot npm...

Malicious code in grus-backend-webdriver-mocha-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee762578e81ff651deb97f909d6088e265292074eacd07e99df87a2e09c9bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116858

Malicious code in aether-transform-capella-warp npm...

Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...