Malicious code in venus-subscription-pino-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b084d77d240ddb72fc2468a96b8d733738ecf2c519fff700a0354752768c0774 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-subscription-sqlite-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e2511e9f9a27ff95e6c98e35f610b47432ec0f22b1470e637ebe6d56afe7e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147005 Malicious code in quito-subscription-neptune-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70002200c66b5b4cc0f28f3f46ad6a34726cb88aae438ffc6a091fe5ed4e7af3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112481

Malicious code in init-subscription-callisto-europa npm...

EUVD-2025-114512

Malicious code in despina-galaxy-auth-subscription npm...

EUVD-2025-121572

Malicious code in subscription-delphinus-grunt-nightwatch npm...

MAL-2025-146205 Malicious code in phoenix-pipe-subscription-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ce4d42780a7001aa44f3c101823bdbcade9d30f0ca76707a7e229a9f1072c0a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146533 Malicious code in private-halley-nodejs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116829

Malicious code in aldebaran-electron-builder-subscription-testcafe npm...

EUVD-2025-121566

Malicious code in subscription-kinetic-eleventy-cluster npm...

EUVD-2025-124077

Malicious code in ophiuchus-spectron-webdriver-subscription-rocket npm...

EUVD-2025-124685

Malicious code in mutation-tailwindcss-websockets-subscription npm...

EUVD-2025-122602

Malicious code in resolvers-cygnus-subscription-event npm...

EUVD-2025-123716

Malicious code in phoenix-pipe-subscription-helios npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

Malicious code in subscription-apollo-hermes-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5a045b40b3cf853afbaa7ab26e9964cb442500499698e1c895db995b6ca412f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112803

Malicious code in hermes-concurrently-hermes-subscription npm...

Malicious code in nightwatch-mongodb-subscription-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5b2015321ec71099b04e8f074d8bc7d0d19b06c3f2ed847d2983a3b28fa945 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...