MAL-2025-145057 Malicious code in miranda-sagitta-package-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94593febd7aadb0e0468641864d190fbd3d0a0ae43e07650fc889f6a630caff9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-miranda-deimos-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b6de0c14198fd929f6f9dd0fa13157940276fbe6fcb62c9dce5cb2a9209c05c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116581

Malicious code in apollo-nightwatch-iota-miranda npm...

MAL-2025-145055 Malicious code in miranda-resolvers-wolf-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdda468c3c4eda1b3e817b7c9c443f941a69386c43821d28297ffaa4924b918b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141518 Malicious code in delphinus-gridsome-async-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 155eb6e50ed9fa16f8b481a53b6a219accfd581f182d20ba18c912211f158455 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145056 Malicious code in miranda-rigel-webdriver-manager-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17bdc0dfd44e9ef24f1f26a65a9dde8fe116137932c6a13652c8544024480f56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112330

Malicious code in jabbah-miranda-standard-achernar npm...

MAL-2025-146823 Malicious code in publish-writable-remark-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec46f6e0858346720b7801097d9bd08d98ef8206557f600b699449748cfdbca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140993 Malicious code in commitlint-miranda-express-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e6c9729e5c963e5d34a195722b7e5ab7ca83819c63665ef44c1069c6b8d8b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145023 Malicious code in miranda-callisto-buffer-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ddc45344f21629bf47dc0ef0344b031549e961860e99d14f16ff3f28c48db76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143070 Malicious code in grunt-prettier-lacerta-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 673afa115104dfb8a556d45232b63297c9af0feff550c9689b7a0bd3a244540a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149523 Malicious code in winston-registry-miranda-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4adc2ee2fc57b0b96c442dd9623b0bb7e158f3600ae026698c48e2cc04e98884 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145362 Malicious code in neptune-fornax-miranda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e546f80e3630052ab9e9536f8ee2827f28cb7a9bfcdf8362f0330a310ed9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140133 Malicious code in browserify-miranda-perseus-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48e4c5bf2761040c3f25e96689c52442b835b80434239fb7a472b30a5cb37178 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141795 Malicious code in draco-quark-dione-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c70caf0a065f874b094b56baaf0fe4c06c6faf90160ec6d14f3e09e716d4c62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145054 Malicious code in miranda-resolvers-pyxis-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 176e2b1d4ed4bcf6e6fc1408a0446559e143aad0aefcf58ad24f1b3904c0beee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145049 Malicious code in miranda-postgres-helios-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b00b3d16da39e85a367558e438d72233d4d67d4b9e9c2633f5b22123e510552 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145047 Malicious code in miranda-pino-pretty-janus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 453d26f45ed78c5c4cd7d03280b37c3807f37e71e097ba1e130022966b51991b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...