MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187175 Malicious code in global-apollo-dysonswarm-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8624af2234afa89e899457b5b5c227d1c1b09212d1eb8b2a207d466c14a8b2e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187128 Malicious code in geckodriver-nebula-spawn-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185814 Malicious code in biohacking-hexo-nebula-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 799bd86e632988c28863335fcedc47e5fe32a6ec91385c1a1eb92d971ee62381 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189143 Malicious code in rehype-janus-nebula-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b030dfe78269f05856c1d36dcfb4812704739de10c5ef8312af45bf99110f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188197 Malicious code in nebula-build-auth0-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f64f27094bea7cf9d6b3712a3714081b3884123be343a197952c08d6ad1b940f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188206 Malicious code in nebula-init-resolvers-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177683

Malicious code in nebula-dactyl-avior-thermosphere npm...

Malicious code in nebulanavigator (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c20fb790b5f99883b77a0a9600e54a3164b9ab6f4f77bc68efe7a84c48b353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114749

Malicious code in csv-test-subscription-nebula npm...

EUVD-2025-113906

Malicious code in eslint-config-pegasus-nebula-hydra npm...

Malicious code in relay-nebula-redis-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bec31780f82ad624282d3562836cf8b9c2f15f678fdef4cfc840fb1c8749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121031

Malicious code in ultra-gridsome-aldebaran-nebula npm...

EUVD-2025-113071

Malicious code in gridsome-geckodriver-envconfig-nebula npm...

EUVD-2025-115193

Malicious code in command-nebula-cygnus-restart npm...

Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e51b8fdb4d679e44dce5f94d31b2b02d247d6d9cadee2a0d6ef9711492a2d56a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123734

Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula npm...

EUVD-2025-116867

Malicious code in aether-nebula-sequelize-readable npm...

Malicious code in chai-library-nebula-norma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51633b5eb10d91cac3ec86fe2365ae8450373b723b5074e954f4a5c87df7bec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...