Malicious code in sequelize-transform-jsonp-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3eebc16db6952b19d5daf098a0e91751627b8bea0d3fc10c37376b8ca1d6998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146256 Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-transform-colors-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91d70cd2849f53b4ee927dbd5ce6124dc606282f9efcab3a38d79e9435a06b6e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122684

Malicious code in release-it-transform-grus-apex npm...

EUVD-2025-123546

Malicious code in polaris-transform-firebase-quasar npm...

EUVD-2025-121206

Malicious code in toml-transform-colors-uninstall npm...

EUVD-2025-120254

Malicious code in xenos-fusion-terser-transform npm...

Malicious code in transform-norma-flare-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9685efa450029c0745cb676603c2b786a4e491760c5f9542c5107d9925439b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121149

Malicious code in transform-xo-eridanus-express npm...

Malicious code in airbnb-transform-apollo-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 286babe43131b1bc5666a0fb2c46ea3d0a97b51b5aeee903c931463caf7e1f60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113367

Malicious code in fusion-redis-transform-tailwindcss npm...

EUVD-2025-114578

Malicious code in delphinus-transform-event-mira npm...

EUVD-2025-114090

Malicious code in enceladus-astro-changelog-transform npm...

EUVD-2025-116754

Malicious code in altair-chai-transform-graphql npm...

EUVD-2025-120980

Malicious code in umbriel-transform-galaxy-pavo npm...

EUVD-2025-113857

Malicious code in eslint-transform-terser-oberon npm...

EUVD-2025-121707

Malicious code in spinner-zenobia-transform-local npm...

EUVD-2025-112084

Malicious code in juno-levels-bunyan-transform npm...

EUVD-2025-115296

Malicious code in cli-supervisor-meissa-transform npm...

Malicious code in ursa-commitlint-transform-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb28edfc6231cf265a832bc4221e5e5b761e862f2c5a22c556cb296ab24fa246 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...