EUVD-2025-113917

Malicious code in eslint-config-bootstrap-cosmos-eclipse npm...

EUVD-2025-122281

Malicious code in sails-cosmos-run-script-envconfig npm...

Malicious code in acamar-cosmos-start-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa5ae8bc81623cf737a4266be3ae0e7ad05a0df1ec0880493ee4f35ccb7ae1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121190

Malicious code in tool-kronos-cosmos-sass-loader npm...

Malicious code in nightwatch-quantum-cosmos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d523ee12ac9a0f0a61a3f8cc6009f7dad2678b53347d3991cb755d728b8a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121378

Malicious code in terser-webpack-plugin-farout-cosmos-phoebe npm...

EUVD-2025-112601

Malicious code in ignite-cosmos-nova-farout npm...

EUVD-2025-114906

Malicious code in cosmos-commitizen-quito-orbit npm...

EUVD-2025-116844

Malicious code in airbnb-module-winston-cosmos npm...

EUVD-2025-113055

Malicious code in grunt-cosmiconfig-inquirer-cosmos npm...

MAL-2025-139258 Malicious code in airbnb-module-winston-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114907

Malicious code in cosmos-bunyan-ophiuchus-perseus npm...

EUVD-2025-115900

Malicious code in bulma-ariel-cosmos-taurus npm...

EUVD-2025-113827

Malicious code in europa-nestjs-cosmos-lacerta npm...

EUVD-2025-114892

Malicious code in cosmos-query-wezen-repository npm...

Malicious code in upgrade-slidev-mdx-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc0348031796f90469cde22eee0a5e31f146d8efa79486674922444e46cb97ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124652

Malicious code in mysql-ultra-meissa-cosmos npm...

MAL-2025-147641 Malicious code in sails-cosmos-run-script-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce4dcef092d4e4e3992f67dde330353e4a21f4715c8c58e5e8e6fee3efcb84f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...