MAL-2025-140017 Malicious code in blaze-antd-halley-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28ada04165f0bab6357a0605b4d95fc185956c1bc0b8618cb7d3f6aa78bd3f36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140034 Malicious code in blaze-uglify-js-schema-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f8d5f1ce6793923e6a5f433e28c137a347dd3e3071b1cfcf658b2ec25fcd7b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112161

Malicious code in jovian-mira-blaze-prompts npm...

EUVD-2025-116511

Malicious code in ariel-mocha-blaze-markdownlint npm...

EUVD-2025-121347

Malicious code in test-schema-blaze-grunt npm...

EUVD-2025-122365

Malicious code in sadr-async-rimraf-blaze npm...

EUVD-2025-124566

Malicious code in neptune-blaze-quantum-dotenv npm...

EUVD-2025-112867

Malicious code in helmet-blaze-eridanus-galaxy npm...

EUVD-2025-116067

Malicious code in blaze-uninstall-pino-pretty-nestjs npm...

EUVD-2025-113966

Malicious code in eridanus-fusion-winston-blaze npm...

Malicious code in puppeteer-writable-blaze-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 703192cac3036ff13d5bdc44a4e5625b481f7c3268d6bfd58fb3ed2c6bbaeb39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113779

Malicious code in event-virgo-electron-blaze npm...

Malicious code in ariel-mocha-blaze-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22bb813f3180d8c2a3d291e70bc1cea255754fd1747760b8056687de594dea02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139819 Malicious code in axios-blaze-electron-builder-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 435766bba1d220eea1948c3caaa83c02a3226900dd278834f7fce9a081c91a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143964 Malicious code in json-blaze-venus-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d51c1c6ec63a3d99da75baa6514564df1e94d76b8d4233dc509033894f4ee415 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141094 Malicious code in cordelia-blaze-mini-css-extract-plugin-markdown-pdf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7031845d6915d8df0ad0345b9b289d606eb2fdaa90aa16ce82af82d3da234c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140205 Malicious code in bulma-blaze-europa-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2187e3df5f25fa89e7d582ad2b49cb8dd54a88d1dc8b42e7694934d80e7d5b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148000 Malicious code in slidev-blaze-zenobia-avior (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41fd4cde87182f18e48fc64a21b8b3a6224f31cfdab55a301fb10c443b934961 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140018 Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...