Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122017

Malicious code in server-weywot-cosmos-mysql npm...

EUVD-2025-116063

Malicious code in blitz-cosmos-scripts-lynx npm...

MAL-2025-139258 Malicious code in airbnb-module-winston-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acb5ec25abac37225c8be7b23ea2da3a0519e6735cddc384929b39303ffc3671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145996 Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141201 Malicious code in cosmos-browserify-transport-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37498829f631e70f8c332116a314debe135d287d9f5da1c3bb49572d356c2931 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141207 Malicious code in cosmos-helmet-grus-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c0832fade9a9296d4f2dfcbccf8d7199ad9b8487cba5e1383233e5c5b44abeb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120862

Malicious code in ursa-phoebe-kaus-cosmos npm...

EUVD-2025-116837

Malicious code in airbnb-unuk-cosmos-eridanus npm...

EUVD-2025-114887

Malicious code in cosmos-yonder-bunyan-sagitta npm...

EUVD-2025-112496

Malicious code in init-cosmos-corvus-pavo npm...

EUVD-2025-115440

Malicious code in changelog-cosmos-sync-transform npm...

EUVD-2025-116844

Malicious code in airbnb-module-winston-cosmos npm...

Malicious code in nightwatch-quantum-cosmos-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d523ee12ac9a0f0a61a3f8cc6009f7dad2678b53347d3991cb755d728b8a357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141221 Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112601

Malicious code in ignite-cosmos-nova-farout npm...

EUVD-2025-124652

Malicious code in mysql-ultra-meissa-cosmos npm...

EUVD-2025-124439

Malicious code in nightwatch-quantum-cosmos-axios npm...

Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...