MAL-2025-143614 Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139567 Malicious code in arcturus-cluster-sagitta-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 549decdffd9a9460d6acaf8c1a3149b65fbf38e6f27108a063dcaaaf982995ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141788 Malicious code in draco-apollo-arcturus-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 334f290cf81f2e9cde3da527c346dd097f89ac61d370ee906265eab329ee5e26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139577 Malicious code in arcturus-toml-carpo-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8147de9a6ba9892bbef8fb92f6494108d9eeabd8b916bf2676a4467a322ec14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148068 Malicious code in solis-arcturus-dotenv-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca87b0bfb0cd17d178e3cecbda0ef3048fd1066fb524f365964e3f00cb0dbdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139570 Malicious code in arcturus-ignite-csrf-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30e3b9ed32ae320ad1acddea3e3a6cbb09e432ca21542a11792b20e4b4eb6fdf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142058 Malicious code in enif-public-halley-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71ba94d315b8f5afc3a2f666a48c4814aabc87877ad09bbf2cf1a000bd7e0ccf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139568 Malicious code in arcturus-dependencies-transport-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149256 Malicious code in vulcan-sqlite-delphinus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6a2dbc5e2a98413df3d411b122fb5cfda40dae48e086dc6727b46b09ef38033 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139574 Malicious code in arcturus-nightwatch-spawn-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c280417853cf4fa3ede78d1dbb013a5560315f5f5d0530853f868a8b13e1d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147185 Malicious code in rehype-socketio-arcturus-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b517b206758d062405fc1f5a4cb182194e74d2f115f80f5bea7031a861c4a0be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146640 Malicious code in promise-global-wolf-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c542283852b34f2b6b3328de1a5885fd139dc09ab31028ccd56879b79590ad54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139572 Malicious code in arcturus-loopback-typeorm-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2ce882a35af2827440b2150e881268e7afeb8bb1936417cdfd796f7f5ab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145645 Malicious code in norma-janus-install-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf62f55865ad3583ff2538e038e4062ec8df240b1b3d96090545a4b0a9521548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143016 Malicious code in gravity-arcturus-auriga-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148116 Malicious code in spectron-ignite-arcturus-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02efe1bbb2a2449adec297c17d1ec80cfa16c0a66e9372af5fb45a925bf1e965 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-configstore-arcturus-cosmiconfig (npm)

The package xenos-configstore-arcturus-cosmiconfig was found to contain malicious code...

Malicious code in janus-vuepress-arcturus-soap (npm)

The package janus-vuepress-arcturus-soap was found to contain malicious code...

Malicious code in jasmine-arcturus-pegasus-resolvers (npm)

The package jasmine-arcturus-pegasus-resolvers was found to contain malicious code...