Malicious code in scorpius-puppeteer-gravity-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a295c665cd756be249510160bcea8ff37c3445fbe45a423d3186e8403d9625f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115332

Malicious code in chromedriver-init-puppeteer-gravity npm...

EUVD-2025-116722

Malicious code in andromeda-octans-gravity-electron-builder npm...

Malicious code in polaris-cache-geckodriver-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4aabbeb70ac312a861cee080d883f38c47e8b66b9d9798c90eda84e2aad74baa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112097

Malicious code in juno-antares-gravity-prompts npm...

EUVD-2025-115525

Malicious code in chai-antares-gravity-eslint-config npm...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-111920

Malicious code in koa-gravity-magellan-helmet npm...

EUVD-2025-113089

Malicious code in gravity-dotenv-safe-quark-publish npm...

EUVD-2025-122253

Malicious code in sass-loader-gravity-draco-miranda npm...

EUVD-2025-113745

Malicious code in express-antares-neptune-gravity npm...

EUVD-2025-113094

Malicious code in gravity-bellatrix-farout-magellan npm...

Malicious code in koa-gravity-magellan-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd05b0517d4ec7568e8246064b2efd94bbb341abb6d37f6c5ae63c2837db6548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123777

Malicious code in phoebe-centaurus-pipe-gravity npm...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

Malicious code in gravity-chariklo-library-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122760

Malicious code in rehype-auriga-google-gravity npm...

Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141793 Malicious code in draco-hapi-luna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43ca38f4a170173c94afac1558333ea2d8020e9a3392cf0aadf92300b6959d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...