MAL-2025-155088 Malicious code in finis-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ddb8f51db08d9f479588e0b7f0688a0b9e0f8a3d64fbe4910f2b286cdd33bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in finish-savion-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a06558798bb549a1148be9f31b651cb0bd06d906aadc8f191995aae6cb2dae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

Malicious code in grus-jwt-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113019

Malicious code in grus-jwt-transform-ceres npm...

EUVD-2025-115440

Malicious code in changelog-cosmos-sync-transform npm...

Malicious code in transform-writable-farout-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bf92cfdd8e9ba325f1984bdf4531e1434e357d88a197cb1fa814f03eb07ac4c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121322

Malicious code in testcafe-spectron-transform-europa npm...

EUVD-2025-115162

Malicious code in commitizen-transform-algol-betelgeuse npm...

EUVD-2025-112883

Malicious code in helios-css-loader-kastra-transform npm...

EUVD-2025-121683

Malicious code in sqlite-transform-jest-loop npm...

EUVD-2025-113029

Malicious code in grus-backend-webdriver-mocha-transform npm...

EUVD-2025-121152

Malicious code in transform-uninstall-octans-mui npm...

EUVD-2025-121154

Malicious code in transform-start-halley-cassini npm...

EUVD-2025-121540

Malicious code in superagent-transform-betelgeuse-chakra-ui npm...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115093

Malicious code in concurrently-transform-prettier-stylelint-halley npm...

Malicious code in umbriel-transform-galaxy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4278a468d54c2a41272a00e6c27081390b88957c1609f8f70f2c538827a5afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112230

Malicious code in javascript-nightmare-lint-staged-transform npm...

Malicious code in exec-scorpius-toml-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...