MAL-2025-140588 Malicious code in chai-dione-juno-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a951b77c82df55f7b3fe4649ffc992bbf0432bd91321308309ec19464d6e90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141186 Malicious code in cosmiconfig-meteor-draco-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4172ff3a9ecb3394a2c362a7510ce7874c7fc1f9cb335e665212ae60a9707b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139248 Malicious code in airbnb-antares-terser-webpack-plugin-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 621360111310bb1d7dcd6fc7f22631c95a9ca27f7eed5e0424872f4f863ea333 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143050 Malicious code in gridsome-release-it-cluster-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc8a82147ad830cbc9da53e0a7feb5a348448c61a836c3fcd2825a9c42a3856a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139432 Malicious code in antares-polaris-vuetify-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84a547d349d71e54630949a781fd9237275efb916048f36953d6392e2995c320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139412 Malicious code in antares-grus-mui-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93fa3640b096ae2e82589e9227198165c847ff2cacbc724947ae2a8a716cb59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114923

Malicious code in cosmiconfig-meteor-draco-antares npm...

EUVD-2025-116655

Malicious code in antares-vuetify-nightmare-request npm...

EUVD-2025-116668

Malicious code in antares-prompts-wolf-hydra npm...

MAL-2025-148074 Malicious code in solis-gatsby-antares-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9221153c0d07120e15425cec2c46f08a5cc1e742d755211e828a0c45e653843d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146383 Malicious code in postcss-charon-antares-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ef6d8dafaa116a5ca64bdb2c40c47a42b8d292a31ce2ea6825553b57b0690c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116939

Malicious code in acamar-antares-prompts-solis npm...

EUVD-2025-124287

Malicious code in norma-antares-react-bootstrap-weywot npm...

EUVD-2025-116681

Malicious code in antares-mensa-husky-middleware npm...

EUVD-2025-111823

Malicious code in leda-rigel-antares-non-blocking npm...

EUVD-2025-112264

Malicious code in jasmine-dione-antares-envconfig npm...

EUVD-2025-116761

Malicious code in alphard-superagent-antares-mysql npm...

Malicious code in antares-cache-mira-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a1a06fcb11ea86032290dda80052d64d12f5c4aa1efcd8a73ce4ac81ea8c6e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-antares-yaml-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2158db6a93e45b802d98978535699fb91afd8047a20243a62aaf72204c09e35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...