EUVD-2025-113333

Malicious code in gacrux-proxima-callisto-acamar npm...

MAL-2025-139190 Malicious code in acamar-vuepress-ursa-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e06f4ec718925e3509cfff8579ddfc34ac0e0bb9a3052dc2648a9e233c27deb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139185 Malicious code in acamar-postcss-eleventy-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ad70d739b42124f7635a058a8dd4723e947b5e3756838b101ab6ccade1f94b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139178 Malicious code in acamar-morgan-janus-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd78f6452c53438ce2b7a8b563f876a3aae4bb238685a29b9a56a2f8df8234bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139168 Malicious code in acamar-cordelia-hyperion-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5122d370154d870ab49437c26d3bc75fa81b827695811b0298ac76a122f1de6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139389 Malicious code in antares-acamar-betelgeuse-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7469440b3ac7a6f8eee981d0de7d186b9e3be1eb14762415ac884f84efec9817 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148724 Malicious code in toml-uninstall-acamar-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b3712e1a9327cc0b6123842ab0d3fd495b50d3e0e9e098c7eeaf5593e748799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139165 Malicious code in acamar-canopus-mui-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4fb2afde0e9df1141200a38e0ea82bee518c42654864678f9679e55f5ee661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139175 Malicious code in acamar-helios-redis-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4557404033bc3d055e3c2f97b617a069cd6bff099c1ddc4a3a1b79a84dd2591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139162 Malicious code in acamar-aether-bunyan-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f74c9b7b56288393328f2847aff7f758279283fefc2bedfab71788cc1b5a460d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140376 Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142709 Malicious code in frontend-mira-indus-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba2f5b74653ef8684794a4ecb5d3a754b2e0b9cf2db7fd5352e3ff15ddce16d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143223 Malicious code in helios-acamar-cypress-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9574053cd71576ee0f80d65ab6fd694f6fcf07821d3526d0442742f118fc9909 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139189 Malicious code in acamar-update-postgres-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fb4db31769e06077155f89e26bad96142790087e079fa0db3fef030b6085eb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139187 Malicious code in acamar-sirius-janus-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01e2d475400fa7007a588d6df6a05d45075c6cf65f9a5f9ad3b00da0e5db62f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139166 Malicious code in acamar-centauri-izar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65dcb67a04bce7b3e85b8d8f65260f06ca2912a4141e61cf48c2c0ad51ea95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139177 Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-jest-acamar-delphinus (npm)

The package umbra-jest-acamar-delphinus was found to contain malicious code...