Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112381

Malicious code in iota-mira-blitz-celeste npm...

EUVD-2025-122780

Malicious code in regulus-blitz-jwt-jabbah npm...

EUVD-2025-112343

Malicious code in jabbah-blitz-oauth-publish npm...

MAL-2025-140067 Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149850 Malicious code in zenith-fornax-nodemon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c233eed913a5955494e36e35b177d30b7e2e149fb6783776be8bba88cdb4ceed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141938 Malicious code in elektra-blitz-development-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1db17c3573c2afc48e71e8d7d0defeea06ca90a04b2e4462187b50a5d95159e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149466 Malicious code in wezen-redis-protractor-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2bc1e5ca6a049543fd24582fa1c4ba546cf8bd1e58763bb26845e8445f48084 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in update-procyon-ophiuchus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ae1c5ac94da1bccd61aa20af4df863fe32433ee4bd8eae2921ec6d0e22556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111668

Malicious code in lint-staged-auth0-blitz-cors npm...

EUVD-2025-116058

Malicious code in blitz-enceladus-ophiuchus-kaus npm...

EUVD-2025-113320

Malicious code in galaxy-meissa-pino-blitz npm...

EUVD-2025-123166

Malicious code in public-cors-blitz-loopback npm...

EUVD-2025-112124

Malicious code in jsonp-blitz-cordelia-less-loader npm...

Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120620

Malicious code in webdriver-manager-blitz-browserify-webpack npm...

MAL-2025-149000 Malicious code in update-procyon-ophiuchus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0ae1c5ac94da1bccd61aa20af4df863fe32433ee4bd8eae2921ec6d0e22556 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...