MAL-2025-147217 Malicious code in release-it-blitz-colors-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf7be65363828d3ccac66faaf2be15e85858adb30d104154beaf697d65e0a711 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140041 Malicious code in blitz-cross-env-ini-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c6aac823acd3e3c267be48e988aa756d7993859affa2c0bcf864a109ee1f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146543 Malicious code in private-slides-postgres-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5375be66b5a308c568af9c49e1f0e9f44a28b23494199dd3e641cb2a0f1f4993 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140048 Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140064 Malicious code in blitz-thuban-mongoose-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a38b52da158ae13c533abaa878bd0546783bdc722f4e37c25cb1f7735c7199a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140039 Malicious code in blitz-cosmos-scripts-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7abf3d475aa8bdb5e299992047446f1bb86e8719bc25a6918e7d6506d40ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143732 Malicious code in iota-mira-blitz-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06f4e3c4abf2d34bf952220e9fd5b0a2bc93b6bab7ed1e7e4bea7acb27ab3cd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146758 Malicious code in public-eslint-plugin-blitz-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029711b6c1419843233976b2871a18f1474bd5661d211e4e8e33df63581d8250 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116040

Malicious code in blitz-supervisor-frontend-bunyan npm...

MAL-2025-143989 Malicious code in jsonp-blitz-cordelia-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9a2d48029e6469105d9d04046b04f81c2e0c08dcaad383e50ec9eb573552b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143770 Malicious code in jabbah-blitz-oauth-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d945e0902b08e77257713b7316b3c50f0ce3c87d1e8804b22212a53021f2df88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148991 Malicious code in update-blitz-karma-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbaebc82b8eaa16346846eed91be01bee36af4c22c983431ab8165b6d70592eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140415 Malicious code in carina-meissa-element-ui-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ec01fdb272c022f85b84fab1b93bc5188f80ff33647b66131c09d9c4b5c438d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147513 Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acfa992f1714e127498f63f69dcf5e804c95c42071e1eaacffada5f691bb554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116054

Malicious code in blitz-koa-umbra-fork npm...

EUVD-2014-5896

Malware in sbrugna...

EUVD-2014-5831

Malware in sbrugna...

Malicious code in blitz-passport-repository-venus (npm)

The package blitz-passport-repository-venus was found to contain malicious code...

Malicious code in magellan-sails-juno-blitz (npm)

The package magellan-sails-juno-blitz was found to contain malicious code...