Malicious code in altair-airbnb-graphql-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116742

Malicious code in altair-promise-castor-heka npm...

EUVD-2025-122712

Malicious code in relay-sedna-gulp-altair npm...

EUVD-2025-123002

Malicious code in quark-capella-canopus-altair npm...

EUVD-2025-120799

Malicious code in version-altair-jwt-epimetheus npm...

Malicious code in pino-altair-uninstall-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0423eb7c4257b5d212c7e4a2eddf4cdb96433580e42544234fa6e5818cbd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123514

Malicious code in postcss-loader-sagitta-dynamo-altair npm...

MAL-2025-139793 Malicious code in await-altair-got-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a660fc5e738c8d00b5f3881d89852c995e28e12b38ece3a1ead965d679ec57a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116738

Malicious code in altair-rollup-plugin-jasmine-chai npm...

EUVD-2025-112269

Malicious code in janus-writable-warp-altair npm...

EUVD-2025-123727

Malicious code in phoenix-flare-config-altair npm...

EUVD-2025-120433

Malicious code in winston-heka-loglevel-altair npm...

EUVD-2025-115995

Malicious code in bootstrap-hugo-altair-rehype npm...

EUVD-2025-112066

Malicious code in jupiter-altair-sagitta-leda npm...

EUVD-2025-120061

Malicious code in zenobia-redis-inquirer-altair npm...

Malicious code in meissa-altair-tool-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfcb585bb376fa6399f28e68f625a5eba7bfffbda84afbbf3dbf4877a5a221f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143075 Malicious code in grunt-rimraf-altair-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51af5f7f2e436b1bf77f1f33fdd45e82656ce5d5f0bc51c4f7e5e94ac407ee73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141787 Malicious code in draco-altair-repository-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da5b7d66f058158f9338114fef59667d4d5f153c6d1ee354332defe2171e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139356 Malicious code in altair-native-webpack-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed6e8418410495e7c4931b3bc647585fd4725d643d2d254e395837c0b1b7288a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-mensa-cypress-node-sass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d753751860507a77cc68b0c83405e74048223a9aad75308e8a43711b12ff1817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...