EUVD-2025-115299

Malicious code in cli-rimraf-callback-exec npm...

EUVD-2025-115972

Malicious code in browserify-meteor-exec-jsonp npm...

Malicious code in betelgeuse-exec-update-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e555950e15a7e2b4e020ff7b30c178cb7e9d44c348eb8310e6831db7125e83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122121

Malicious code in selenium-cypress-izar-exec npm...

EUVD-2025-113767

Malicious code in exec-ignite-hermes-process npm...

EUVD-2025-123856

Malicious code in perseus-adonis-bootstrap-exec npm...

EUVD-2025-115125

Malicious code in commitlint-exec-webdriver-manager-ini npm...

Malicious code in exec-scorpius-toml-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7daf0e843578606a660a5a5683f1243e6794785cedd068b8403e79e4357aa2cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116123

Malicious code in betelgeuse-exec-update-magellan npm...

EUVD-2025-121165

Malicious code in transform-exec-sedna-sagitta npm...

EUVD-2025-116672

Malicious code in antares-perseus-indus-exec npm...

EUVD-2025-113749

Malicious code in exec-scorpius-toml-transform npm...

EUVD-2025-121556

Malicious code in subscription-zephyr-exec-pegasus npm...

Malicious code in transform-exec-sedna-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141842 Malicious code in dynamo-venus-exec-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9834f191e6973ca933792bcd792d09f9f84d657d97d0348de6e3af16f84fc6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...