MAL-2025-146354 Malicious code in polaris-mdx-pulsar-transport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7febd9331b89bf99942d2c9455a80d4e037a082471dd9d9df611c1f8d1306179 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148498 Malicious code in telesto-pulsar-postcss-loader-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146833 Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de284ef22c3d79d0eb08d849bacc79b6b331418af35f35cdf63627b30baba057 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148247 Malicious code in standard-airbnb-pulsar-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7bbc9a54197108d5227e17926f1c7b477b3b3c8dfe3b222333e539cd29d282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116471

Malicious code in async-node-sass-fork-pulsar npm...

EUVD-2025-123077

Malicious code in pulsar-terser-publish-oauth npm...

EUVD-2025-124380

Malicious code in node-sass-geckodriver-colors-pulsar npm...

EUVD-2025-121312

Malicious code in tethys-dependencies-janus-pulsar npm...

EUVD-2025-123092

Malicious code in pulsar-europa-phoebe-mocha npm...

EUVD-2025-116779

Malicious code in alphard-express-pulsar-schema npm...

EUVD-2025-124404

Malicious code in node-config-pulsar-google-weywot npm...

Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116170

Malicious code in bellatrix-cosmos-pulsar-foundation npm...

EUVD-2025-123082

Malicious code in pulsar-process-postgres-sedna npm...

EUVD-2025-121498

Malicious code in sync-pulsar-sequelize-framework npm...

EUVD-2025-121390

Malicious code in terser-spawn-pulsar-mdx npm...

Malicious code in chai-pulsar-carpo-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8ce4a96f135a3c69d6d9fe7fd4f2bfb0e7b88c4879a666884f1fa4f1f6d13e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

MAL-2025-141765 Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...