MAL-2025-186309 Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178533

Malicious code in hermes-websockets-arcturus-meteor npm...

EUVD-2025-180200

Malicious code in avior-atlas-draco-websockets npm...

EUVD-2025-175582

Malicious code in websockets-areology-perseus-redgiant npm...

EUVD-2025-179083

Malicious code in equinox-passport-janus-websockets npm...

EUVD-2025-178417

Malicious code in inflation-hercules-websockets-private npm...

EUVD-2025-179573

Malicious code in cordelia-websockets-yakutsk-quark npm...

EUVD-2025-176954

Malicious code in proxima-thermosphere-weywot-websockets npm...

EUVD-2025-179395

Malicious code in darkmatter-gravitationalwave-less-websockets npm...

MAL-2025-186928 Malicious code in express-proxima-websockets-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee0a304fa501650f89077e1daec98bbd0bb5ef6a4cceac9cecb13c6ac45490f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178894

Malicious code in firebase-command-ursa-websockets npm...

EUVD-2025-124672

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin npm...

EUVD-2025-122480

Malicious code in rigel-websockets-centaurus-lyra npm...

EUVD-2025-111990

Malicious code in karma-websockets-kastra-europa npm...

EUVD-2025-124523

Malicious code in nestjs-google-websockets-rocket npm...

Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 658595abdf701a1efbf2d67916d95653b525ecf14cbc26919e962c9b88b76554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111795

Malicious code in less-loader-despina-helios-websockets npm...

Malicious code in websockets-odin-build-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e72ddae6120c248ca7b9f4efad1a802437f6e57620450654b98681aca0f57c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120365

Malicious code in wolf-vortex-helmet-websockets npm...

Malicious code in titan-auth-websockets-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 433a1f1238fa18babfb7cdb34edd93e4b23abddb489dead658c27f8f3aec0a08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...