EUVD-2025-116760

Malicious code in alphard-test-dactyl-buffer npm...

EUVD-2025-116828

Malicious code in aldebaran-elektra-alphard-vuepress npm...

EUVD-2025-114419

Malicious code in dorado-jsonp-alphard-vuetify npm...

Malicious code in polaris-alphard-sequelize-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7988b1f08d0bc2a590a8e320ec2c4eeee3fd6b264506c79c02671ab18b9c5481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116154

Malicious code in bellatrix-oberon-prettier-alphard npm...

EUVD-2025-120581

Malicious code in webdriver-mocha-geckodriver-alphard-spica npm...

EUVD-2025-116767

Malicious code in alphard-pino-quasar-eslint-plugin npm...

EUVD-2025-122859

Malicious code in react-bootstrap-lint-alphard-ursa npm...

EUVD-2025-116785

Malicious code in alphard-auth0-webdriverio-meissa npm...

Malicious code in alphard-cluster-reveal-md-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee22bbbe9632215a2c3c8b8578c6322a0cfb2caa0be027efb0af754d7e2e82ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124086

Malicious code in ophiuchus-phenomic-alphard-lyra npm...

Malicious code in alphard-superagent-antares-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2031cddbc5978edd7175e265db1b17377473bce5d6cf2b5e972cf82573504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112315

Malicious code in janus-apollo-alphard-acamar npm...

Malicious code in alphard-jupiter-yonder-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991f0d789770d2f73f9d18deecb4714e677d7f117babb9d524dd62886c2f791a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139338 Malicious code in alphard-pulsar-umbriel-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a403cde30f3b89e6bdab6ed0efd2615e48746d0458d5f5ccac299ba6ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141846 Malicious code in eclipse-alphard-promise-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11c2d18ca2f3faec8f5b44d1646ac4e157f8fd63aa204750ef48ed219fceef1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139341 Malicious code in alphard-superagent-antares-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2031cddbc5978edd7175e265db1b17377473bce5d6cf2b5e972cf82573504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141656 Malicious code in docusaurus-cluster-alphard-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b84c12202454bd02ae202474f478a23b79dbfba994093185c385a0a8198c8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139746 Malicious code in auth0-event-winston-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eca62e2d6414ed0efda22dc45da9e9f2d5b43e9efcbfa092dd84761726126c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...