EUVD-2025-112012

Malicious code in karma-deneb-umbra-yaml npm...

EUVD-2025-116050

Malicious code in blitz-nodejs-postcss-umbra npm...

Malicious code in quito-umbra-registry-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bef2cead8bc437414921c520821083a4ff3b65865bf0b3b088799fa0c5de2657 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123277

Malicious code in promise-nuxtjs-umbra-express npm...

EUVD-2025-121008

Malicious code in umbra-mdx-algol-webdriver-mocha npm...

EUVD-2025-121676

Malicious code in standard-ariel-umbra-eclipse npm...

Malicious code in spawn-tool-concurrently-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121488

Malicious code in tailwindcss-callback-andromeda-umbra npm...

EUVD-2025-111547

Malicious code in loopback-umbra-atlas-perseus npm...

EUVD-2025-123731

Malicious code in phoebe-yaml-mongodb-umbra npm...

EUVD-2025-112460

Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository npm...

Malicious code in spica-json-umbra-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e26370197219e71a02c3263fecd9518f07a236ae4b30c53a4642cb3efe432a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113467

Malicious code in fornax-postcss-loader-umbra-webdriver-manager npm...

EUVD-2025-120318

Malicious code in xanadu-umbra-got-reveal-md npm...

MAL-2025-148927 Malicious code in umbra-nodejs-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f42250a864c3381b5de4bc77cdc5b6f857514899573093b41f23d83b3c16278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148933 Malicious code in umbra-react-bootstrap-meissa-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf93686ac0c5d7e54ffaed0b8ea0486e846b54a3e4cf06bca794c4275d878695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148915 Malicious code in umbra-chalk-zenith-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9f0749f6807047fc716098a7e59564eff5af9f83ed200b75d93cccbcbbf8a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140231 Malicious code in bulma-umbra-jwt-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4b1e107a01795cb4e0333a5cd37929bfa63193200bef0f27be1199d84640f70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148668 Malicious code in thuban-umbra-gravity-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b5d746437c92b9d5b96323a0656d9a1055a41f64bc4e23bb8156057519e935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148934 Malicious code in umbra-sirius-scorpius-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7721c0109181d5cc7814e23c29a571aeedbdfbfc5a0cbed0d273bfe7ad968f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...