EUVD-2025-116287

Malicious code in await-writable-janus-sedna npm...

Malicious code in betelgeuse-writable-grus-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc35fc95967e6792a523b2b50ca9116565941ee17151c3a44088bee86775c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112478

Malicious code in init-writable-pino-semantic-release npm...

EUVD-2025-120356

Malicious code in writable-neptune-figures-oauth npm...

EUVD-2025-120357

Malicious code in writable-mui-iota-quark npm...

EUVD-2025-112269

Malicious code in janus-writable-warp-altair npm...

MAL-2025-143421 Malicious code in husky-loop-writable-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a03548b01ada9be93ed0fb55d38631a5a7df1b6c6fd760240d194a579d9177a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-writable-enceladus-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ccfec4d2517dd03a12e8231fd31bc5c85ea5a4dbd11b1c6f704472ec91ca385 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120349

Malicious code in writable-umbriel-betelgeuse-altair npm...

EUVD-2025-112422

Malicious code in install-writable-centaurus-wolf npm...

EUVD-2025-120362

Malicious code in writable-izar-tool-cli npm...

EUVD-2025-120818

Malicious code in venus-express-lynx-writable npm...

EUVD-2025-120353

Malicious code in writable-polaris-babel-elektra npm...

EUVD-2025-112135

Malicious code in json-ophiuchus-jovian-writable npm...

Malicious code in puppeteer-writable-blaze-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703192cac3036ff13d5bdc44a4e5625b481f7c3268d6bfd58fb3ed2c6bbaeb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-spawn-writable-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98529c833cbb87e017a27e085a759a2b5c2daa8f6c81183a5d835f87821f4d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120361

Malicious code in writable-jabbah-elektra-rest npm...

Malicious code in writable-mui-eclipse-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e45366a5bba33878c6502bbbd773eb845366dcc9940e5c867b6093acc04700fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149569 Malicious code in writable-izar-tool-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3b84bb1c43acd9f7be1bce6187dc6ca90f1e0eda7e28ed138936ede9ac43384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...