EUVD-2025-124887

Malicious code in miranda-elektra-wasat-halley npm...

MAL-2025-143288 Malicious code in hercules-less-elektra-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7113289ee85e9f5d55f5fd301260d14823c26ffd054923a793191ee7fe7d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141151 Malicious code in corvus-elektra-meteor-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec321cc8d8a1cb04ceb61935280a6bf3e36c4d2762d39ecac3715152c646fce6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120353

Malicious code in writable-polaris-babel-elektra npm...

EUVD-2025-114165

Malicious code in elektra-draco-kinetic-backend npm...

EUVD-2025-120286

Malicious code in xenon-grunt-elektra-procyon npm...

Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114157

Malicious code in elektra-tethys-perseus-ursa npm...

EUVD-2025-114156

Malicious code in elektra-toml-chalk-lint npm...

EUVD-2025-114692

Malicious code in cz-conventional-changelog-dotenv-parse-variables-optimize-css-assets-webpack-plugin-elektra npm...

MAL-2025-143256 Malicious code in helmet-mysql-auriga-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fb083d543cb2b32e10d866fd5f088b1cc67195da82893e307ebea62ffee3a6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143176 Malicious code in hapi-betelgeuse-elektra-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cac274f03345eff3a6a95ef1daebb33b6da23343c6402e2c78753db54db027 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115220

Malicious code in comet-prompts-elektra-non-blocking npm...

EUVD-2025-124414

Malicious code in node-config-flare-elektra-xenos npm...

Malicious code in superagent-ceres-elektra-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a66c3a57836582b7185f06c9c1430258609cf3dea75d4eeff001c71cc967c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113058

Malicious code in grunt-bootstrap-mongoose-elektra npm...

Malicious code in scorpius-umbra-electron-builder-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862a2349ffda24c475fb6b50662ed3b2a243d7c9031ce530c284e46c5f71a68a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112856

Malicious code in helmet-mysql-auriga-elektra npm...

MAL-2025-140991 Malicious code in commitlint-link-rigel-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b8fa010bce1786502752abf23a3825afebf6de24de10513fa7eec8842bc29e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...