EUVD-2025-123967

Malicious code in parcel-chariklo-uninstall-regulus npm...

EUVD-2025-120959

Malicious code in uninstall-sedna-config-helios npm...

MAL-2025-145954 Malicious code in parcel-chariklo-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140035 Malicious code in blaze-uninstall-pino-pretty-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 012e1dd3b007039777a4a2c814e875e70312f0522f0beeb3372043b2aa4c8566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142619 Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1e48bc62209c89160996573d84930ddaf09ff81ca1ad4fb77f100c80e668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145697 Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148959 Malicious code in uninstall-html-webpack-plugin-leda-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb68b97568f84089399c4178cd2addd4a7ad438f5e102df3bae522b903b5bb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148971 Malicious code in uninstall-sync-apex-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 189409f4dc200c6e26d27168dc6d08f0262204ea0a085b6a5af402e6a94c250d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142756 Malicious code in gacrux-commitizen-uninstall-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a26219600ef7d96d48a10ca9e239a52acae6ed0fe396c10a6afb98d447e0b34b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120960

Malicious code in uninstall-sass-loader-pegasus-weywot npm...

Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b1e48bc62209c89160996573d84930ddaf09ff81ca1ad4fb77f100c80e668e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120964

Malicious code in uninstall-prompts-carpo-auriga npm...

EUVD-2025-112102

Malicious code in jsonp-vuepress-uninstall-ceres npm...

EUVD-2025-113160

Malicious code in global-uninstall-sadr-duplex npm...

Malicious code in phenomic-ceres-uninstall-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e46df6ac51c8d7445b7bd05abfc596bad25b952eaa26ab0106c78d1ab1f3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148974 Malicious code in uninstall-zephyr-publish-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b931f7d82bdf49c8bd7009b6500a4b5e18fbc27af224965bbe9a5312f8102958 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144569 Malicious code in loopback-uninstall-europa-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4244f6505f7c45e72bf30aca99770c0cc5832f3159ed307e19d993b30c5af9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148744 Malicious code in tool-nconf-uninstall-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eee5451848821f91944130f40d2773f898a24946c94bc868c73c1fea30875de0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147604 Malicious code in sagitta-luna-uninstall-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f782191c278c6bc57c441f785dd87f2e95bd22c25c583321e8ff771f44a1e2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-43079

The Qualys Cloud Agent included a bundled uninstall script qagentuninstall.sh, specific to Mac and Linux supported versions that invoked multiple system commands without using absolute paths and without sanitizing the $PATH environment. If the uninstall script is executed with elevated privileges...