MAL-2025-185807 Malicious code in biogeochemistry-carpo-alphard-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6ae68492781c51e2028c436dc6451385234e8dcd5c0047bca8aba4e03c5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185442 Malicious code in alphard-mui-gatsby-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb3005addfce76c80633ae60df973892cc0a170579a5315c529dcf35c96059a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186997 Malicious code in flare-polaris-sadr-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1ed2baf393192b5d6507e61ac34292a1a2f72fa14241f210bfb3dff96c5dcb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180449

Malicious code in alphard-fetch-electron-builder-levels npm...

Malicious code in alphard-pegasus-server-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa461d7d0894f0839cb8ce6a4066ce402a451d1bbad3c07e5b954c8e025915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114108

Malicious code in eleventy-lacerta-private-alphard npm...

EUVD-2025-124086

Malicious code in ophiuchus-phenomic-alphard-lyra npm...

EUVD-2025-116785

Malicious code in alphard-auth0-webdriverio-meissa npm...

EUVD-2025-114386

Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...

EUVD-2025-116780

Malicious code in alphard-enif-xenos-neptune npm...

EUVD-2025-122859

Malicious code in react-bootstrap-lint-alphard-ursa npm...

Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120581

Malicious code in webdriver-mocha-geckodriver-alphard-spica npm...

Malicious code in alphard-superagent-antares-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2031cddbc5978edd7175e265db1b17377473bce5d6cf2b5e972cf82573504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114092

Malicious code in enceladus-alphard-tool-dione npm...

Malicious code in alphard-cluster-reveal-md-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee22bbbe9632215a2c3c8b8578c6322a0cfb2caa0be027efb0af754d7e2e82ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124793

Malicious code in mongodb-dotenv-transform-alphard npm...

EUVD-2025-124586

Malicious code in nconf-winston-standard-alphard npm...

EUVD-2025-116767

Malicious code in alphard-pino-quasar-eslint-plugin npm...

Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...