Malicious code in init-solis-gravity-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123340

Malicious code in procyon-chakra-ui-comet-init npm...

EUVD-2025-124740

Malicious code in morgan-init-auth0-rollup npm...

Malicious code in node-sass-process-wolf-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5009110c757b0598a61838ec0b3547d6aecab8a31eefd10856eb59291fa0ccda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113054

Malicious code in grunt-cross-env-init-phenomic npm...

EUVD-2025-111726

Malicious code in library-pulsar-mini-css-extract-plugin-init npm...

MAL-2025-140335 Malicious code in callisto-init-astro-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7dee1332ca141e642cda2234291c22182742cb21c0c4340edc739302c351aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148173 Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124370

Malicious code in node-sass-process-wolf-init npm...

EUVD-2025-122595

Malicious code in resolvers-init-ursa-docusaurus npm...

EUVD-2025-112493

Malicious code in init-europa-cressida-yonder npm...

EUVD-2025-114189

Malicious code in electron-init-vulcan-wolf npm...

EUVD-2025-121897

Malicious code in soap-nextjs-init-tool npm...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

Malicious code in library-init-flare-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0bd269a356ae3f884d25ed3afd367540fa7f952b3a55f8746d6c3a7ab5ef34e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120432

Malicious code in winston-init-public-prompts npm...

EUVD-2025-115662

Malicious code in carpo-init-stop-terser npm...

EUVD-2025-113376

Malicious code in fusion-init-helios-hercules npm...

EUVD-2025-114851

Malicious code in cross-env-init-sedna-telesto npm...

Malicious code in forever-init-hermes-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc72a982fb73f02c8f20755a13b861f7402472d335a1b3e2d03004f3717da706 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...