MAL-2025-140258 Malicious code in bunyan-umbriel-relay-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f3f063c2281fff1e1b70c86da2fc195585d3c059d7911720de2e6ad6746f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148940 Malicious code in umbriel-fornax-antd-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1de2a170e3a64a9adcb806038c97af286f9f63038f225d46c3e58a6d5f43055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124237

Malicious code in npm-nodejs-umbriel-buffer npm...

EUVD-2025-116864

Malicious code in aether-prettier-stylelint-umbriel-rollup-plugin npm...

EUVD-2025-113101

Malicious code in graphql-umbriel-enceladus-umbriel npm...

EUVD-2025-122085

Malicious code in semantic-release-umbriel-enif-foundation npm...

EUVD-2025-115846

Malicious code in bunyan-umbriel-relay-bellatrix npm...

EUVD-2025-112479

Malicious code in init-wezen-umbriel-hyperion npm...

Malicious code in install-umbriel-quark-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcbfcb6557d0e33dc30e56738fb4e41d9731edd32959fdc035f77fd6f13a42d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120671

Malicious code in vulcan-umbriel-jovian-radiant npm...

EUVD-2025-115740

Malicious code in canopus-nova-dotenv-umbriel npm...

EUVD-2025-113102

Malicious code in graphql-transport-umbriel-mini-css-extract-plugin npm...

EUVD-2025-121983

Malicious code in sirius-config-levels-umbriel npm...

EUVD-2025-112523

Malicious code in ini-event-dependencies-umbriel npm...

EUVD-2025-116273

Malicious code in axios-graphql-umbriel-uglify-js npm...

EUVD-2025-121343

Malicious code in test-umbriel-morgan-testcafe npm...

EUVD-2025-120990

Malicious code in umbriel-dactyl-solis-publish npm...

EUVD-2025-124843

Malicious code in mocha-fornax-umbriel-release-it npm...

Malicious code in miranda-umbriel-jasmine-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 586dd2d29d903fab061c45f82a7e5906d9366bb1708107c946f9cd6446b3b48c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...