EUVD-2025-112578

Malicious code in impulse-altair-iota-avior npm...

Malicious code in protractor-eslint-plugin-nestjs-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4f8cd32f1110ccbffa6ecc79072349b56e4f362a8e6373a58b6f845469a69df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hapi-dynamo-janus-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77ec975125b6a288a6fd1ecc2cf29882839c1001107382b5ea3e6cb491ef263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113697

Malicious code in farout-gacrux-bulma-altair npm...

EUVD-2025-120621

Malicious code in webdriver-manager-altair-chromedriver-express npm...

EUVD-2025-116737

Malicious code in altair-sails-izar-warp npm...

EUVD-2025-122584

Malicious code in rest-altair-csrf-arcturus npm...

EUVD-2025-123002

Malicious code in quark-capella-canopus-altair npm...

EUVD-2025-114640

Malicious code in dagda-fusion-altair-rest npm...

Malicious code in flare-antares-altair-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1dd19c2038ff973dd2b4ea0902b25852272ab1db03e4ddefba38fd37d87ec5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116604

Malicious code in apollo-bunyan-gravity-altair npm...

EUVD-2025-111775

Malicious code in less-miranda-rocket-altair npm...

EUVD-2025-116735

Malicious code in altair-soap-lacerta-kastra npm...

EUVD-2025-116754

Malicious code in altair-chai-transform-graphql npm...

EUVD-2025-116738

Malicious code in altair-rollup-plugin-jasmine-chai npm...

Malicious code in pino-altair-uninstall-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0423eb7c4257b5d212c7e4a2eddf4cdb96433580e42544234fa6e5818cbd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-heka-loglevel-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73b653b39fbd93175eb9c58fed17b6c446545000911327d49ec037d7485efa31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116742

Malicious code in altair-promise-castor-heka npm...

Malicious code in altair-airbnb-graphql-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c76d50832dc7ab98677387bda1e24e8e43a74397e6dc03c9b59ea52ff4393cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...