Malicious code in global-leda-xenon-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 711449061c304954070a6e0690741a6de984afff904bc2f2fe9f6e481fce0a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120830

Malicious code in vega-supervisor-exec-taurus npm...

EUVD-2025-113171

Malicious code in global-leda-xenon-supervisor npm...

EUVD-2025-111613

Malicious code in local-xo-supervisor-prettier-stylelint npm...

EUVD-2025-113899

Malicious code in eslint-config-supervisor-figures-sails npm...

Malicious code in meissa-supervisor-markdown-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a60cdc4d5317b650a261573ff13fe8a451e6e91f68730697fa7045ac908f307e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124673

Malicious code in mysql-farout-morgan-supervisor npm...

EUVD-2025-122697

Malicious code in release-it-meteor-dorado-supervisor npm...

EUVD-2025-124165

Malicious code in oberon-sass-loader-supervisor-ultra npm...

EUVD-2025-113963

Malicious code in eridanus-install-supervisor-deneb npm...

Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124666

Malicious code in mysql-leda-supervisor-cordelia npm...

MAL-2025-143852 Malicious code in jasmine-fomalhaut-changelog-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caa38a95490450c4b15fd8fc796ac0472049559c3449ac79dbe54b1e6a3e178f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140046 Malicious code in blitz-hyperion-leda-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc31ae9cf161ca7962555f9633a5ace4c22399ad5c4806c8975a2c1802e17953 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148951 Malicious code in uninstall-acamar-supervisor-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 465df38a02f20b2ca2a8a698edc1288e4f1dce24d0e7da6a996f5d02dacbfec4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142410 Malicious code in farout-draco-supervisor-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4858586155e7e63f2df1e9db1181fe0476633fc8b100b90271961b692e2d9f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147623 Malicious code in sagitta-supervisor-publish-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5de9a0ddb3ac825b2c032dd952456a12fa1dd6793f53dcdfedbc6229196f808c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140812 Malicious code in cli-supervisor-meissa-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74ded4cfab8e2f8639c75038f912fc662017e8aaf4dfc60ff97515f615d09a11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121532

Malicious code in supervisor-koa-carpo-hugo npm...

Malicious code in jest-hermes-configstore-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55cfe725d260f2ff8e857501ff3c86c3d6102de8a1412fb9208bb9189e66ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...