EUVD-2025-120964

Malicious code in uninstall-prompts-carpo-auriga npm...

MAL-2025-145697 Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142756 Malicious code in gacrux-commitizen-uninstall-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26219600ef7d96d48a10ca9e239a52acae6ed0fe396c10a6afb98d447e0b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114941

Malicious code in corvus-tool-eris-uninstall npm...

MAL-2025-148974 Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-altair-uninstall-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0423eb7c4257b5d212c7e4a2eddf4cdb96433580e42544234fa6e5818cbd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ophiuchus-uninstall-atlas-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7987faf5875c3a74aa2d72be108f2bd4bba8b4bc1b62b3d08cbc02392b2923e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144011 Malicious code in jsonp-vuepress-uninstall-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22c1b7d849adddb2164e3659fb2e5c1d9952215c0d2bb3750fe6a52862dfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148971 Malicious code in uninstall-sync-apex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189409f4dc200c6e26d27168dc6d08f0262204ea0a085b6a5af402e6a94c250d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147604 Malicious code in sagitta-luna-uninstall-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f782191c278c6bc57c441f785dd87f2e95bd22c25c583321e8ff771f44a1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145954 Malicious code in parcel-chariklo-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140035 Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148959 Malicious code in uninstall-html-webpack-plugin-leda-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb68b97568f84089399c4178cd2addd4a7ad438f5e102df3bae522b903b5bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142619 Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1e48bc62209c89160996573d84930ddaf09ff81ca1ad4fb77f100c80e668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111307

Malicious code in meissa-hugo-express-uninstall npm...

EUVD-2025-124074

Malicious code in ophiuchus-uninstall-atlas-chai npm...

EUVD-2025-122318

Malicious code in sagitta-luna-uninstall-sadr npm...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...