MAL-2025-144727 Malicious code in markdownlint-sedna-flare-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccac0ca5ed4eb95ae4a346b68a35cc0148d39329f500d5a3af31185ae88ed48f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-iota-flare-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a50c96b1287c51a55201d73cdb9ecdc1b3140a6327aae2f01394af233affd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122774

Malicious code in regulus-iota-flare-eris npm...

EUVD-2025-114669

Malicious code in dactyl-flare-galaxy-galaxy npm...

EUVD-2025-124386

Malicious code in node-sass-eclipse-flare-nashira npm...

EUVD-2025-113587

Malicious code in flare-framework-ursa-webdriver-mocha npm...

Malicious code in tool-spectron-flare-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bedb9911b41711fcf4f6c6e7513c584bcce63553d1287bed2b66b9ea07353f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121174

Malicious code in tool-spectron-flare-repository npm...

EUVD-2025-123986

Malicious code in package-lacerta-flare-telesto npm...

EUVD-2025-120194

Malicious code in xml-triton-flare-auth0 npm...

EUVD-2025-113584

Malicious code in flare-halley-meissa-jupiter npm...

EUVD-2025-123069

Malicious code in puppeteer-ganymede-hermes-flare npm...

EUVD-2025-113579

Malicious code in flare-materialize-passport-nightwatch npm...

Malicious code in flare-carpo-server-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e3e65bef83798c5681727ab59647810e76221c13e4cf6fbe8a12608241c6f92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112435

Malicious code in install-got-dorado-flare npm...

Malicious code in rehype-tailwindcss-spica-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbaa22480822e3bd06fffd321d2be249fa65838c2ae86440d457b59409ec3f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121024

Malicious code in ultra-playwright-flare-thuban npm...

MAL-2025-140397 Malicious code in capella-sails-barnard-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76e1d2cd92ef953315bbcbe9321c6e119ba90c15d656d1d9ba2daa51b3f89d48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139796 Malicious code in await-dactyl-flare-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0997e94e577b4a4ff7fc6f45c2326910b7e2834f4394205bbbd2358585a5f584 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147715 Malicious code in scorpius-scripts-flare-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89eaec14f2f27132288be226ebb081c4188c0c06b56eb85760ea8dc44db967b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...