EUVD-2025-111149

Malicious code in middleware-upgrade-request-zephyr npm...

EUVD-2025-111929

Malicious code in kinetic-registry-zephyr-corvus npm...

EUVD-2025-120955

Malicious code in uninstall-zephyr-publish-aether npm...

EUVD-2025-112372

Malicious code in iota-restart-zephyr-jasmine npm...

EUVD-2025-120035

Malicious code in zephyr-standard-arcturus-selenium npm...

Malicious code in zephyr-resolvers-cli-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010e7aa179a021023ded32a1531ca34e4cd286c20d4e8b50aca8afa148a3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdown-pdf-sqlite-zephyr-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 195291aa189c6bfdaa7f3956ee1401e30637c563743c36d71d9c6e0cd6aa28d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in charon-start-miranda-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb4739b0491b5f29158a524432828b6abf6fc274c2a323ede927229fea9fe88f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149895 Malicious code in zephyr-semantic-ui-mysql-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63e57d11c4d7901d16ef26e405850611d2f59d8153b151f725245de49008bea7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147633 Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140608 Malicious code in chai-zephyr-jasmine-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d141d9e454317e0cf8e1698d576224400e48df61534527f0678f0d477a7953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149882 Malicious code in zephyr-charon-draco-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ed338c2debeeda0e1406d49dd402a5cca90b1cca0aa88d2480ec73c64a6d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149878 Malicious code in zephyr-airbnb-procyon-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69b9ef6c0754649729eb5f9e2c42335591b0d749077825d24757eea9c21d2a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144392 Malicious code in library-webdriverio-zephyr-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cb2806e454a3347d97bfec9ab573fcc2fba18838157b58f6c66978cb0b7d1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120049

Malicious code in zephyr-child-process-apollo-global npm...

EUVD-2025-124808

Malicious code in module-module-puppeteer-zephyr npm...

EUVD-2025-120038

Malicious code in zephyr-resolvers-cli-concurrently npm...

MAL-2025-149885 Malicious code in zephyr-ganymede-meteor-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80b7e546a6bd6e50bc24188bfa46ad9548a435f3389805cd711ddd4a6937dfae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146629 Malicious code in procyon-zephyr-antares-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5fc30b7ed93f03ab4d474b9ccb3e1d273e2a48d3f0e8f5f2eaec982ddee396c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144209 Malicious code in koa-testcafe-koa-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ba567e6bbedaaba4579cca62d69d9473426445d875a51b7d5ba3fb7b433575 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...