Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142997 Malicious code in graphql-chai-schema-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8815d1a4d4f17193b365dff9a9095f12e31e182c8b4d9189ceeeb9f15874d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148075 Malicious code in solis-graphql-figures-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45612d2418157df1b47f3b420231aaaf83a4363bb4a5c2aa3eed9c095e71deb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143654 Malicious code in inquirer-pm2-graphql-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 964a75711a342b3eb5fc2ab4d78f2cf2af03901b2758dbe99095253d8708e938 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143797 Malicious code in janus-apex-writable-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfdc92c35108b7bac99e9f035fd519cc20125241b0a253c8541000e44936d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145012 Malicious code in mira-oauth-graphql-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fd666d7a3a56d61d6f5aaaadba57754e6def4f1ffc6d210c12b9da72eccc0b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143142 Malicious code in halley-graphql-europa-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55027f6a56c857da8cb0b35b787396175411ea1da50f3df1203935e5cd19b1e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146031 Malicious code in pegasus-graphql-playwright-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9485849dcf43ce232720e15f229be2925398be484ea117e2cc67c5e107784b5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144112 Malicious code in karma-kronos-protractor-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2613bf60636387829ca0905577e948da2806d337f061920b907c9fc948430379 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148658 Malicious code in thuban-oauth-graphql-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1bea268dfde784764d8a6760df49b436ccfb4a3c6881153cfd443747248420d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148896 Malicious code in ultra-graphql-xo-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb7fe9788fc5f85a480b8336fcd4cf110708d0c9494d6b9eb531def9a0c2053f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123274

Malicious code in promise-rimraf-supervisor-graphql npm...

EUVD-2025-111238

Malicious code in metalsmith-graphql-pegasus-hermes npm...

EUVD-2025-112022

Malicious code in jwt-webdriverio-pulsar-graphql npm...

Malicious code in magellan-graphql-levels-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20526f5014eee97ee2e57fd6f52681ed6681877adc4ebeefb396c9d8ff23adea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-atlas-graphql-spectron-webdriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2e1e09c839e7a8dd1bf2271918dfd6f0dffef915db2fca18e17edd957e22026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-plugin-markdown-sails-process-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14cec4c47bf880dbc0312f699945952724a754541d14cd4729e60f73900dc187 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in process-mysql-graphql-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce30421baf221f5039852b56fa71beb90736340eb15021cdb3e1155efa5bad6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...