MAL-2025-142905 Malicious code in gemini-mocha-impulse-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b010660ad164a18819dbd6d24421ef243c375607f6d17327b70191151552afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142914 Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120098

Malicious code in yonder-commitlint-config-angular-nightmare-gemini npm...

MAL-2025-141752 Malicious code in dotenv-safe-gemini-spica-materialize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d90a21326b456e45374854954b0fa67cbaa4f70120bb594b30d8ad762c87e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113216

Malicious code in gemini-dynamo-mongodb-exec npm...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112465

Malicious code in inquirer-gemini-ultra-version npm...

EUVD-2025-120491

Malicious code in weywot-gemini-dynamo-regulus npm...

EUVD-2025-113203

Malicious code in gemini-perseus-spica-passport npm...

EUVD-2025-114141

Malicious code in element-ui-gemini-got-ursa npm...

EUVD-2025-114754

Malicious code in csv-quantum-gemini-meteor npm...

EUVD-2025-112492

Malicious code in init-gemini-cassini-warp npm...

Malicious code in nightwatch-css-loader-charon-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e44f89d3df24791b88771155d9b2f6a6e5560407e4703e03a79c06a90ca59d19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-wolf-subscription-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aac34b37db8f5230563ed1d7c9aca5ba4992c6274148ebc27c70174dcc389fa2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112690

Malicious code in husky-meteor-gemini-sirius npm...

EUVD-2025-113206

Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies npm...

EUVD-2025-111564

Malicious code in loopback-gemini-bellatrix-ora npm...

EUVD-2025-121033

Malicious code in ultra-gemini-miranda-antares npm...

EUVD-2025-115308

Malicious code in cli-gemini-kastra-unuk npm...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...