EUVD-2025-120687

Malicious code in vulcan-kaus-deimos-nashira npm...

Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120736

Malicious code in vortex-vulcan-commitlint-config-angular-shelljs npm...

MAL-2025-149255 Malicious code in vulcan-solis-browserify-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a40989ecbfc67526b1e18be46dcf17d5b24dd68bd0e2e3b1553aeacef469c34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146412 Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149248 Malicious code in vulcan-nestjs-nodemon-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bca58c5db7f633962cd43a5bc3ee223af16b073b273e82fa1008712c7fafb6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143063 Malicious code in grunt-fornax-scripts-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86b24a4805f69c694b755d320a93a2363344653864b86f7c05ec19bf0d1b07dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149227 Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02af8e5f5322a6dd20faee018c741ee859aab71d39ab4c17c10a576073f4f1f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149240 Malicious code in vulcan-init-pino-pretty-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1f8344d04ae5521883f7f79bbe97baff5a334a93ecff03a3abc413f5a49e990 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149225 Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123940

Malicious code in passport-helios-vulcan-nightwatch npm...

EUVD-2025-120684

Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat npm...

EUVD-2025-120697

Malicious code in vulcan-exec-foundation-gridsome npm...

EUVD-2025-116696

Malicious code in antares-docusaurus-toml-vulcan npm...

EUVD-2025-122655

Malicious code in repository-hexo-vulcan-vuepress npm...

EUVD-2025-120683

Malicious code in vulcan-nconf-quark-child-process npm...

EUVD-2025-120706

Malicious code in vulcan-adonis-pino-zenobia npm...

EUVD-2025-120685

Malicious code in vulcan-lyra-cassini-local npm...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-vulcan-mdx-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...