EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116693

Malicious code in antares-forever-eleventy-carpo npm...

EUVD-2025-111806

Malicious code in less-centauri-prettier-antares npm...

EUVD-2025-113755

Malicious code in exec-nuxtjs-antares-umbriel npm...

EUVD-2025-121858

Malicious code in solis-antares-altair-wolf npm...

MAL-2025-140188 Malicious code in build-publish-centaurus-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b97fdf8cc707d1ad10e2072131e6414494e53de3f5aad8415866f852ad745ef0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139402 Malicious code in antares-csrf-ignite-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfd3b91a49b333d4e3b551e825ad73ebabb48af5696ee496404e652d6a1ee9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139418 Malicious code in antares-leda-luna-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2734aeefcc945d4ff9812135f8f15e8f00c20f17f3484b21437ac518dbbe05fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146621 Malicious code in procyon-transport-antares-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dd5e963ca95be4d275776c26fe8bbf0e69bad83e16e6477c525e3b11082bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148480 Malicious code in taurus-rocket-tailwindcss-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e807b35ff747380871af9c1a0c9c793ec19b44283a142ca5794a2dc3a8219c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121448

Malicious code in taurus-rocket-tailwindcss-antares npm...

EUVD-2025-116652

Malicious code in antares-xenos-fornax-forever npm...

EUVD-2025-114915

Malicious code in cosmiconfig-prettier-stylelint-centaurus-antares npm...

EUVD-2025-116676

Malicious code in antares-nuxtjs-xanadu-hercules npm...

MAL-2025-141810 Malicious code in duplex-gridsome-antares-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ebe8ecc207c1773caf691799f0028ead9f4ce74df00b2bed7ca7bb70dd6e88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146705 Malicious code in proxima-antares-fork-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c5a865e3d4d02711490a2be6a57c970e51104a73d1676040dc3d3f42ba52cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139413 Malicious code in antares-gulp-apex-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b128228eb51518ab485665e8665fddcb1645b49f06e44cdb7c6b4c72c8c74071 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143110 Malicious code in gulp-await-antares-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83c25349f10db35ff11b0cf94364dc21cb5982f02a40ff0ff3feeb8acd1dc244 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...