EUVD-2025-120583

Malicious code in webdriver-mocha-deneb-transform-karma npm...

EUVD-2025-112084

Malicious code in juno-levels-bunyan-transform npm...

EUVD-2025-121205

Malicious code in toml-transform-mongoose-cz-conventional-changelog npm...

Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122684

Malicious code in release-it-transform-grus-apex npm...

Malicious code in event-transform-apex-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8329d07d153602e53d39e6ab9792a42a05d33fe8f6d9b74237d2d37676bac1ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116754

Malicious code in altair-chai-transform-graphql npm...

EUVD-2025-121164

Malicious code in transform-helios-jekyll-spawn npm...

Malicious code in transform-norma-flare-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9685efa450029c0745cb676603c2b786a4e491760c5f9542c5107d9925439b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-transform-colors-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d70cd2849f53b4ee927dbd5ce6124dc606282f9efcab3a38d79e9435a06b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121206

Malicious code in toml-transform-colors-uninstall npm...

EUVD-2025-111436

Malicious code in markdown-apollo-transform-ora npm...

EUVD-2025-113857

Malicious code in eslint-transform-terser-oberon npm...

Malicious code in enceladus-astro-changelog-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6efd41f89e1f4813626936bd4429f05995210039bb5ea8841fb974a5dad146b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121136

Malicious code in transport-lynx-transform-webdriver-mocha npm...

EUVD-2025-121162

Malicious code in transform-jwt-vulcan-dione npm...

EUVD-2025-113781

Malicious code in event-transform-apex-child-process npm...

Malicious code in html-webpack-plugin-transform-google-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cbfa1c849b8cb20cc8ce270cbf9982ba6f0e50f6009a690a43118dd3260ece1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grus-backend-webdriver-mocha-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee762578e81ff651deb97f909d6088e265292074eacd07e99df87a2e09c9bed7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...