EUVD-2025-122665

Malicious code in remark-venus-restart-sagitta npm...

MAL-2025-143741 Malicious code in iota-restart-zephyr-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83a7daabab530d79b8db3ad0510cf6550376ed0f4ebd84028108abfaa1eaf571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147394 Malicious code in restart-quark-fusion-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1c631713ec6fefd9d7cdb0891872d6a826be32ad71a4c25f3a8e2c3d9b5221d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144224 Malicious code in kronos-restart-csrf-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e758bf75f5a61e0c8abe19a6c4243b9f6aedf5a19fd8bb606ffe0d267c32861e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143074 Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147388 Malicious code in restart-ophiuchus-mensa-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eb41da6b1204b68543c531905c89b825e2ee0559eaeb908efae9b13ceca35d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149420 Malicious code in websockets-global-restart-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f5ce49d06db23468c3abaa5c402e0c91f82c933fede1e8ade09e88eda295f67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in grunt-restart-triton-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3186b5f6b93aeeff146e69477bb6e550ad4e0ff49e0661360e637ed6cd6d087 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-restart-luna-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-quantum-public-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 124f32f9ca1bb4dec77e4c7dfd7d93584f92b71a291ca7d219c1c986fa6a3f71 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120295

Malicious code in xanthus-restart-publish-resolvers npm...

EUVD-2025-111409

Malicious code in markdown-pdf-restart-scripts-yaml npm...

EUVD-2025-115193

Malicious code in command-nebula-cygnus-restart npm...

EUVD-2025-124873

Malicious code in miranda-octans-gulp-restart npm...

EUVD-2025-114115

Malicious code in eleventy-dotenv-node-config-restart npm...

EUVD-2025-115716

Malicious code in capella-kaus-global-restart npm...

EUVD-2025-116667

Malicious code in antares-restart-oauth-zenobia npm...

Malicious code in bunyan-promise-mongoose-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53bb462501821db097afe4d817964df59b4d319045bf01e3471e2e443cae8cfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...