EUVD-2025-113780

Malicious code in event-transform-electron-builder-draco npm...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146256 Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140092 Malicious code in bootes-stop-transform-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20374e8caf0bd75d4edba32a6b2f96df1c8c8e237574c8e0c54b06adb98a25e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148606 Malicious code in testcafe-spectron-transform-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7699ee15c3365e2d516a2c2c0477fc547aaf34fd773ef8b4137ca6cf01a765af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121682

Malicious code in sqlite-transform-luna-exec npm...

EUVD-2025-121540

Malicious code in superagent-transform-betelgeuse-chakra-ui npm...

Malicious code in stop-transform-ultra-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32b60d96dbe7f22ec72e5b3eff029c03cfadfbbdce6f395bc6655514b781d5e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-xanthus-got-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75781e4fdfbf44aaa54bd56aabe7774674004a1a0f8c21d181238759f9a854f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148648 Malicious code in thuban-development-transform-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9970fc2cf7485e3a83f92015f3ef345dc16d84cdf3b6f96adcc69731705a2da6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139382 Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122684

Malicious code in release-it-transform-grus-apex npm...

Malicious code in umbriel-transform-galaxy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4278a468d54c2a41272a00e6c27081390b88957c1609f8f70f2c538827a5afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139345 Malicious code in altair-airbnb-graphql-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147176 Malicious code in rehype-meteor-pegasus-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73fa9c9bc7d00cb76bf4363eeb00bf670efaa50798ea6e6eb8f5a516d613d61f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121162

Malicious code in transform-jwt-vulcan-dione npm...

MAL-2025-139348 Malicious code in altair-chai-transform-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e57b70246ceb72a49720b47e3ecfd3567bcccae73b01aba9d723cd8ba9b6bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148243 Malicious code in sqlite-transform-luna-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e1c0baf148c725b306ad0cdbbc0621ad0c6b25c3f9486da86908af334f598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...