Malicious code in kronos-restart-csrf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758bf75f5a61e0c8abe19a6c4243b9f6aedf5a19fd8bb606ffe0d267c32861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in toml-chalk-restart-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7520b306eae00850d2361ae42043475f5d647e1b78a8d0d15efd2b81199c3117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122542

Malicious code in restart-eridanus-less-loader-cordelia npm...

EUVD-2025-114529

Malicious code in dependencies-restart-luna-regulus npm...

Malicious code in restart-vulcan-slides-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1416529f490fb914cb006a56abdab3149c6a5548526f1b0994d74c7e60aa2b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122521

Malicious code in restart-webdriver-manager-websockets-eleventy npm...

EUVD-2025-122550

Malicious code in restart-alphard-procyon-phoebe npm...

EUVD-2025-114327

Malicious code in dotenv-safe-wezen-loop-restart npm...

EUVD-2025-122537

Malicious code in restart-lynx-meissa-superagent npm...

Malicious code in restart-helios-metalsmith-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53eb87ce92ab285b72ad75a25b3357183a98accf962cb853dcec26bebee2f932 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in virgo-zenith-restart-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07fe21562e735a0fe98f27a49b5b6b1b0381e2bf1d80496151aac69fb232dfc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121787

Malicious code in spectron-webdriver-restart-cluster-repository npm...

EUVD-2025-120201

Malicious code in xml-mocha-restart-semantic-release npm...

EUVD-2025-122548

Malicious code in restart-changelog-heka-eslint-plugin npm...

EUVD-2025-122665

Malicious code in remark-venus-restart-sagitta npm...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144224 Malicious code in kronos-restart-csrf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758bf75f5a61e0c8abe19a6c4243b9f6aedf5a19fd8bb606ffe0d267c32861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149420 Malicious code in websockets-global-restart-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5ce49d06db23468c3abaa5c402e0c91f82c933fede1e8ade09e88eda295f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147378 Malicious code in restart-dagda-commitlint-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3a489e404fa3e5ba48d881d8d7cd1f82bf1bcdc6ad950396eb54957ab413aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...