MAL-2025-139288 Malicious code in algol-achernar-spectron-webdriver-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46bdfcb26dc0908515856f1c27702b0c0d93665097677e7a0dd3a896aa1d6483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123312

Malicious code in procyon-perseus-hermes-achernar npm...

EUVD-2025-121210

Malicious code in toml-nestjs-achernar-spectron npm...

EUVD-2025-124065

Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa npm...

EUVD-2025-115954

Malicious code in buffer-achernar-winston-triton npm...

EUVD-2025-124046

Malicious code in ora-achernar-kinetic-postgres npm...

EUVD-2025-123150

Malicious code in publish-achernar-rollup-plugin-miranda npm...

EUVD-2025-120766

Malicious code in virgo-nuxtjs-achernar-spectron-webdriver npm...

EUVD-2025-115904

Malicious code in bulma-achernar-babel-bulma npm...

Malicious code in pavo-altair-native-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99357f611b0c148cb640d54224f2b72469de895ef5eab012a6f4d2c54d678e5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122458

Malicious code in rocket-despina-izar-achernar npm...

EUVD-2025-123530

Malicious code in postcss-loader-css-minimizer-webpack-plugin-achernar-barnard npm...

MAL-2025-142043 Malicious code in enceladus-yaml-thuban-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e46781eef16c099e80d02af004a2d27414141e970c47df84b2291f9f5e131859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147378 Malicious code in restart-dagda-commitlint-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3a489e404fa3e5ba48d881d8d7cd1f82bf1bcdc6ad950396eb54957ab413aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116814

Malicious code in algol-achernar-spectron-webdriver-dorado npm...

EUVD-2025-122766

Malicious code in regulus-remark-achernar-virgo npm...

EUVD-2025-120152

Malicious code in yakutsk-resolvers-phoebe-achernar npm...

EUVD-2025-124297

Malicious code in non-blocking-stream-achernar-webdriver-mocha npm...

EUVD-2025-122037

Malicious code in sequelize-websockets-uninstall-achernar npm...

Malicious code in antares-vega-electron-achernar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 040d240576965aed13ed11371c55ee7e2365e2d115a89b45043d3337d7d15156 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...