EUVD-2025-123444

Malicious code in prettier-plugin-markdown-browserify-link-radiant npm...

Malicious code in pulsar-radiant-cypress-dione (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3178bfda625ae6afb0496687a9c92e24aae195151c40703d0a50c6408ee55d3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145440 Malicious code in nightmare-nebula-axios-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2597649307233fc7e02c398dd6aa688e4964b170be8ec32aeaf0852589d735e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149258 Malicious code in vulcan-umbriel-jovian-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07d06f26e3082cb1c1ae58325b21f22029f52104bff9713f2a6c644765e77df0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139362 Malicious code in altair-radiant-comet-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc2aa8d1279b2b923e8a549372a45c9413fd69d357c13a65d0aede79fe767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147025 Malicious code in radiant-superagent-ganymede-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ab4e17ca04eda20c7350db8dee121f4d4ff7f072f496ca889fcb66c812136c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147021 Malicious code in radiant-proxima-kastra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c059ad999a8d2ee6212251a9089d2fc0458dc46516a4c87a9e833bbdf6bf5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143111 Malicious code in gulp-blitz-radiant-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2272dce106a80652d7130e9f69d1980ddc9bc530edc7cba63e8fee9d913ef8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146817 Malicious code in publish-stream-radiant-yaml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 017d207c1d0a9323b05f24974015e02bb9f98d35f470de400a2f2b78c0d893b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147010 Malicious code in radiant-chai-mocha-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99491c240d8088c06fdb3478e9e583a262165df844b1f086e011a2d07f10ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147026 Malicious code in radiant-tool-postcss-loader-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc4499499c8548c0ac5d008278a2990487d0bf10c924b79a538991ba90a0eee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147014 Malicious code in radiant-equinox-pm2-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1dfdbb60037d98cb4076c74dcd46b2323884f2253eb379e85db9ad413affc169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142680 Malicious code in framework-epimetheus-dynamo-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478efc3b4b38da17d0d9e7f57a3b8184ba903e348c6c29973c0d063a315656c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147024 Malicious code in radiant-spinner-prompts-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672b586fc704e80537020f4425ed8b4ba982e4a9c98f2cd2c6bc5572b9bd1e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139333 Malicious code in alphard-odin-radiant-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061b018c3c576a12e91b1414b540a920cf4d9a62aa4d6901c07ab7ef1b75bd98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139655 Malicious code in atlas-radiant-sirius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693785909b6a2f6ec0efded6f239ca9b5178f141954c0652b3b1996fdf9303b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149659 Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148177 Malicious code in spica-radiant-await-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d9f9a3f881cb11fe0d8855419bcd6658ea71a4049938253b6e9edb76c72d7bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149646 Malicious code in xenon-hercules-radiant-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43a24f39209acb3cb879a6ca05be744135816f6fe66160f3b9609b78e8449678 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...