MAL-2025-139663 Malicious code in atlas-typeorm-jsonp-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a937ac555dd0194b7f6f5ba5db28bbd261412ec503e9a23d31fb3992b936bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122660

Malicious code in repository-dependencies-hydra-async npm...

EUVD-2025-114892

Malicious code in cosmos-query-wezen-repository npm...

EUVD-2025-115047

Malicious code in configstore-repository-terser-canopus npm...

MAL-2025-149659 Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140881 Malicious code in comet-mira-lyra-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120215

Malicious code in xerxes-repository-parcel-ora npm...

MAL-2025-147702 Malicious code in scorpius-betelgeuse-repository-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81293ced15c162c3d772014dd627c146e6a5c2e5189fbff9ecfce8e25026940d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111642

Malicious code in lint-staged-xerxes-repository-metalsmith npm...

Malicious code in apollo-mocha-atlas-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fd2746d873666f4365b41ed0fc9271d71a3480d6f86e815799cf9954bfa49b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-repository-dorado-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33f75725f9f75ccb932f7dbc086b96c3076af491dada30ce8ea604a5c2071120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112308

Malicious code in janus-dorado-repository-soap npm...

MAL-2025-145714 Malicious code in nuxtjs-repository-browserify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63f4787bbbd170be4d0f76478b9c29f56d18d71a9c85eba70f5c44df767291d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-repository-uglify-js-webdriverio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad346edfd4edd2e29551090c05102d6a12d79b3fab9648346b880d2e34714ac3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113788

Malicious code in event-repository-cordelia-phoebe npm...

EUVD-2025-114004

Malicious code in epimetheus-repository-package-nestjs npm...

EUVD-2025-112948

Malicious code in halley-repository-dorado-cluster npm...

EUVD-2025-114703

Malicious code in cypress-repository-rimraf-nebula npm...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...