Malicious code in resolvers-solis-native-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22d6c0271bfa31246dc0e28318a0cfb1ce680b0268ea0bf941130328312bcf78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178171

Malicious code in kuiperbelt-phoebe-native-abiogenesis npm...

EUVD-2025-177701

Malicious code in native-izar-hugo-start npm...

MAL-2025-186680 Malicious code in eclipse-parsec-native-commitlint-config-angular (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ad95dcc42d1e37b32db227d88bcbb1c29f48527e882181591d17621d99b3b24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179781

Malicious code in chalk-pulsar-native-xerxes npm...

EUVD-2025-176805

Malicious code in radiometric-native-adonis-cygnus npm...

MAL-2025-189970 Malicious code in transform-version-sequelize-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e0b260696b6e01b16b95ea6411e5bdda668fb587ccda3c63e369cde6cd117d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186384 Malicious code in cross-env-native-centaurus-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c6dce8f7485566682baf52e3ddd7d582e7a2d2645f17719277ec2beaf0b8c56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189958 Malicious code in tool-tailwindcss-cosmology-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 024cbd055f4aa386cbd24118ce725f651db3fc425f37acf6453c7e535d8d1d1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188185 Malicious code in native-rollup-plugin-sagitta-tectonophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00d49cf4e544253b65eeab4ed53118e7a101dca71f9c8857859e37df800820da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177708

Malicious code in native-blackhole-parcel-node-sass npm...

EUVD-2025-124429

Malicious code in nightwatch-triton-equinox-native npm...

EUVD-2025-124012

Malicious code in orbit-native-dotenv-oauth npm...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

EUVD-2025-120240

Malicious code in xenos-thuban-resolvers-native npm...

Malicious code in rimraf-native-wezen-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f783af03f5cd53bdf2d57a926a7e3f1eac33d66fc2c6865ab531181c7f231f1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-triton-equinox-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13ee17a1a11f62310bd6043d3296351b281b50f31c46091754519d19a34fa87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...