MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149383 Malicious code in webdriverio-sails-perseus-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f54d6d3405988939147e15ad93363602512ac312efbbdb733e39a2f217639f2d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121000

Malicious code in umbra-npm-jovian-local npm...

EUVD-2025-121225

Malicious code in toml-changelog-umbra-rimraf npm...

EUVD-2025-115113

Malicious code in commitlint-triton-less-loader-umbra npm...

EUVD-2025-113364

Malicious code in fusion-umbra-farout-unuk npm...

EUVD-2025-112368

Malicious code in iota-umbra-upgrade-nodejs npm...

EUVD-2025-116209

Malicious code in backend-oberon-gulp-umbra npm...

EUVD-2025-121009

Malicious code in umbra-fomalhaut-cypress-bootstrap npm...

EUVD-2025-112940

Malicious code in halley-weywot-publish-umbra npm...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

EUVD-2025-116139

Malicious code in bellatrix-yonder-umbra-polaris npm...

EUVD-2025-121762

Malicious code in spica-json-umbra-commitizen npm...

EUVD-2025-120996

Malicious code in umbra-phenomic-electron-builder-eslint npm...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113907

Malicious code in eslint-config-morgan-javascript-umbra npm...

EUVD-2025-114364

Malicious code in dotenv-safe-bunyan-private-umbra npm...

EUVD-2025-114250

Malicious code in eclipse-umbra-levels-yildun npm...

EUVD-2025-120994

Malicious code in umbra-sirius-scorpius-module npm...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...