Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111166

Malicious code in middleware-blitz-mutation-transform npm...

Malicious code in phoebe-oauth-blitz-playwright (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2c729a4cb488df8cae036da08e103306bdad34795f865fc600c0f099b12065 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114172

Malicious code in elektra-blitz-development-rocket npm...

EUVD-2025-115692

Malicious code in carina-meissa-element-ui-blitz npm...

EUVD-2025-116146

Malicious code in bellatrix-rest-blitz-style-loader npm...

EUVD-2025-116044

Malicious code in blitz-pulsar-bootes-dagda npm...

Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116052

Malicious code in blitz-lint-odin-cache npm...

EUVD-2025-116041

Malicious code in blitz-stream-less-yakutsk npm...

Malicious code in blitz-fork-umbra-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7ed6fff075c7c8191f5bb8ca9ceae5566724e352dfc03429d19a8afd34aefc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116059

Malicious code in blitz-enceladus-hercules-spica npm...

Malicious code in karma-electron-builder-blitz-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7509e20ca26b7c59996183c03c0c1f8e94eccd887ac91a3b488ba5d569464f2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123379

Malicious code in private-slides-postgres-blitz npm...

EUVD-2025-123755

Malicious code in phoebe-oauth-blitz-playwright npm...

EUVD-2025-120303

Malicious code in xanthus-indus-umbra-blitz npm...

EUVD-2025-124158

Malicious code in octans-blitz-meteor-non-blocking npm...

EUVD-2025-116034

Malicious code in blitz-zenith-flare-hapi npm...

EUVD-2025-116056

Malicious code in blitz-hyperion-leda-supervisor npm...

Malicious code in regulus-blitz-jwt-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ad40f6b4c653a8d4b76f65b28575d51152312e7a0a56ca06c6229c9f07afcde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...