Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-native-dotenv-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

EUVD-2025-122541

Malicious code in restart-event-achernar-native npm...

EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

EUVD-2025-124012

Malicious code in orbit-native-dotenv-oauth npm...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-121226

Malicious code in toml-chalk-restart-native npm...

EUVD-2025-114661

Malicious code in dactyl-native-superagent-nextjs npm...

Malicious code in async-native-vortex-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cea674df46845fb77c13437ffe4d939741ffe9a2677b308288efb81c6c5ed58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114015

Malicious code in epimetheus-ganymede-native-superagent npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-111181

Malicious code in meteor-sedna-markdownlint-native npm...

EUVD-2025-112219

Malicious code in javascript-umbriel-kronos-native npm...

Malicious code in mui-enif-octans-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b35d0a5b9ffc2decde1b6cc5b23bf7b0c2c7016a282c07204a34fd5864eb48c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122890

Malicious code in rate-limiter-bunyan-centaurus-native npm...

EUVD-2025-124630

Malicious code in native-enif-redis-redis npm...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...