EUVD-2025-123442

Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth npm...

EUVD-2025-124665

Malicious code in mysql-lynx-bellatrix-karma npm...

EUVD-2025-124393

Malicious code in node-sass-bellatrix-commitizen-yaml npm...

EUVD-2025-115095

Malicious code in concurrently-standard-bellatrix-element-ui npm...

EUVD-2025-111167

Malicious code in middleware-bellatrix-pm2-npm npm...

EUVD-2025-123289

Malicious code in promise-bellatrix-helios-acamar npm...

EUVD-2025-124329

Malicious code in nodemon-proxima-unuk-bellatrix npm...

MAL-2025-145697 Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111321

Malicious code in meissa-bellatrix-izar-chariklo npm...

MAL-2025-139989 Malicious code in betelgeuse-middleware-bellatrix-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 558a753c5ec00d54999a3046a59f0048b6658f9f6baeda1a054887a37d664257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139954 Malicious code in bellatrix-protractor-fomalhaut-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4aa076d16605f852f34a40ab150b55bcd62c3c8df33c8f1fa61916e50f8113 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139475 Malicious code in apex-charon-bellatrix-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d45efaa2137362f3875d3d485c2cbe47b7af8b35490c7f6d3da3eecf4e1be69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139931 Malicious code in bellatrix-cosmiconfig-axios-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 540a04c21a6b3d09e342cff07e11c6ee102c77d1794b9495cf445dca7e2054fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodemon-proxima-unuk-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9231659b3661d60dc91fec22101d3c048f835aaf30977c88f932687c6fba24b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in global-draco-virgo-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac8da2ab4b62c8dd339ff475a68b7c495dc169c8043db895cf6966aa61fdbd81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113180

Malicious code in global-draco-virgo-bellatrix npm...

Malicious code in event-backend-bellatrix-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5595b1d4ec3c6ec493010da0a65ce1110cccaa8064745ea9cb362a6791bd2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146647 Malicious code in promise-registry-bellatrix-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab1a5c501ec3299dcc8dfa9935e0f26ed824255bb5062b9cb5ddfe62fbd4f34c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139937 Malicious code in bellatrix-figures-mongodb-warp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f312e39cb7550f1523d4dd46a9a1d0e0df309952e4138b70ec6964f280b0f8f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139488 Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...