MAL-2025-143246 Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116781

Malicious code in alphard-eclipse-deneb-atlas npm...

EUVD-2025-111729

Malicious code in library-prettier-plugin-markdown-alphard-betelgeuse npm...

EUVD-2025-123179

Malicious code in proxima-sqlite-module-alphard npm...

EUVD-2025-116786

Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus npm...

EUVD-2025-114453

Malicious code in docusaurus-cluster-alphard-phenomic npm...

EUVD-2025-116776

Malicious code in alphard-hugo-enceladus-child-process npm...

EUVD-2025-113867

Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard npm...

EUVD-2025-111494

Malicious code in magellan-alphard-cygnus-sirius npm...

EUVD-2025-121888

Malicious code in soap-taurus-alphard-await npm...

EUVD-2025-115627

Malicious code in castor-alphard-sirius-cordelia npm...

EUVD-2025-114264

Malicious code in eclipse-alphard-promise-commitizen npm...

Malicious code in build-quantum-alphard-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111328

Malicious code in meissa-alphard-xanadu-graphql npm...

EUVD-2025-124840

Malicious code in mocha-graphql-alphard-sirius npm...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145673 Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141690 Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149202 Malicious code in vuetify-alphard-dynamo-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fa9c7ec7f02c2efbe3f8f04e4a49d7bc3465be28ffbf97b4dd6915297c77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...