Malicious code in mantle-achernar-kinetic-whitedwarf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c799008fb34f7cb2fa52e045f7f6d7471d623dbbafec1c8b02a121ae895ec8de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sanitize-sed-transpile-analyze-sandbox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0255f3ef4a6d499d802e5dd3e1c3ed31caeb68c77cd945be657b3bf65f132070 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175868

Malicious code in try-alert-hash-catch-index npm...

Malicious code in signal-authenticate-cluster-await-byte (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a9c4b67b3adc6ae2f52304f08d24dafce84d84d9f5fa1ccbc8017c2dc638b4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180408

Malicious code in antd-style-loader-miranda-uninstall npm...

EUVD-2025-177694

Malicious code in nconf-aurora-ionosphere-callisto npm...

EUVD-2025-176342

Malicious code in slidev-airbnb-phoebe-library npm...

EUVD-2025-176193

Malicious code in stream-build-ganymede-corvus npm...

EUVD-2025-179853

Malicious code in cat-compile-analyze-deploy-cloud npm...

EUVD-2025-178990

Malicious code in exec-supernova-soap-mongoose npm...

EUVD-2025-178143

Malicious code in leda-pm2-lacerta-speleology npm...

EUVD-2025-179479

Malicious code in cryptography-cross-env-google-yildun npm...

EUVD-2025-179069

Malicious code in eridanus-rigel-cosmiconfig-pino-pretty npm...

EUVD-2025-179056

Malicious code in error-fast-class-visualize-new npm...

Malicious code in blazar-quark-publish-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6051df5e76609f10fbecf1f58e20ad09d8098ec4fed4723d9a81bca13555b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-eris-ora-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 396eb7d9acfb07e0b4d45bf71b3a83fb17f984b821fe561d455530ef55d0f946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189960 Malicious code in tool-webdriver-mocha-prettier-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0202e0c6d5116df45f3fbcb466f9f4469417db5a0a3a8c2d51725d491a76e674 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188999 Malicious code in quantum-computing-server-phenomic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e4eaeb6ca6f3e7e8583b6325db4dc2405956f5cf99b5fea3fa0a71ec3990d93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188969 Malicious code in pulsar-exoplanetology-archaeoastronomy-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caac07e1bf5c1b94c910df20a6ccb7007eb0d404de098553e2b1ff4fa1258e44 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186175 Malicious code in cloud-user-static-promise-stub (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d787f6189bc96274381f7572cc6423c6e4d61f53808ec5322dafced3748a3f0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...