Malicious code in gatsby-capella-cli-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70ae7b409af968790cb31d4f80f53de02919a0ec8faeb9b589e37e0b5e2c3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-cli-barnard-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6495e5dd212b62e122019aa03288e721c9ebc41f26fbc902e00502ce9f915a41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-115307

Malicious code in cli-install-hercules-prompts npm...

EUVD-2025-115323

Malicious code in cli-auth-elara-sedna npm...

EUVD-2025-115264

Malicious code in colors-corvus-postgres-cli npm...

EUVD-2025-123645

Malicious code in playwright-cli-antares-lynx npm...

Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120038

Malicious code in zephyr-resolvers-cli-concurrently npm...

EUVD-2025-114570

Malicious code in deneb-cli-process-protractor npm...

EUVD-2025-123958

Malicious code in parcel-markdown-pdf-cli-centauri npm...

EUVD-2025-122724

Malicious code in relay-cli-altair-forever npm...

Malicious code in koa-odin-aquarius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5224286352a2ba1a1be9265f826fd979201b470b0eadf7543fa1921604f6f120 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-corvus-postgres-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2eb7eafb397099447d7894757e36ecfbe2dfe1fc171de2c28d818bd4b75bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115311

Malicious code in cli-ganymede-markdownlint-indus npm...

Malicious code in deneb-cli-process-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 456e0252c4e2a30003d54a2df3e186700c4398ac5252d762bff1e11127186e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112471

Malicious code in inquirer-cli-hermes-commitizen npm...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...