MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fetch-husky-europa-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42ec5ebb87d9beb9b2b0237447f6fb1b337d45c7d61ac2ef391f2e1546be1a27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113663

Malicious code in fetch-iota-nightwatch-apollo npm...

EUVD-2025-112120

Malicious code in jsonp-charon-warp-fetch npm...

Malicious code in octans-venus-fetch-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7185ffd095e4f4b31889ffa376123541f96ad34c8939f74a4f4ab17f5905aea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113664

Malicious code in fetch-husky-slides-sedna npm...

EUVD-2025-113680

Malicious code in fetch-adonis-less-loader-figures npm...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-112859

Malicious code in helmet-fetch-forever-registry npm...

EUVD-2025-111239

Malicious code in metalsmith-elektra-fetch-event npm...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112527

Malicious code in ini-delphinus-fetch-sync npm...

EUVD-2025-111585

Malicious code in loop-ophiuchus-fetch-antares npm...

Malicious code in jasmine-fetch-standard-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c5b2a64e133eb436cf9d493d5f98ad2e3d60e9c56f7f4bbe9dd7a9bedb5315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113661

Malicious code in fetch-luna-virgo-algol npm...

EUVD-2025-113659

Malicious code in fetch-polaris-loopback-registry npm...

EUVD-2025-113666

Malicious code in fetch-hexo-commitlint-config-angular-metalsmith npm...

EUVD-2025-113545

Malicious code in forever-fetch-flare-farout npm...

EUVD-2025-115178

Malicious code in commitizen-fetch-leda-webpack npm...

Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...