MAL-2025-186008 Malicious code in carpo-mdx-comet-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4595409170e260ff1842190bade73fd00f5722cb17fc89c590765a3a6244b293 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180517

Malicious code in acamar-comet-flare-robotics npm...

EUVD-2025-179658

Malicious code in comet-pyxis-cosmochemistry-library npm...

EUVD-2025-178588

Malicious code in hawkingradiation-jupiter-toml-comet npm...

EUVD-2025-179874

Malicious code in carpo-mdx-comet-hyperion npm...

EUVD-2025-175832

Malicious code in umbriel-bootstrap-polaris-comet npm...

EUVD-2025-175771

Malicious code in ursa-comet-cosmogenic-virgo npm...

EUVD-2025-180194

Malicious code in avior-quasar-comet-bootstrap npm...

EUVD-2025-176452

Malicious code in seismology-enceladus-comet-singularity npm...

Malicious code in umbriel-bootstrap-polaris-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c7e22f661b3b8aa6ba56ea19195787c22f7e2c718cb13c4698d74adefd90d00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unuk-uglify-js-astrochemistry-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57906ac6a4735bb92280c00660dfe0fcb082121021fc0d695fd942e50c6163c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180503

Malicious code in adonis-comet-sedna-geomorphology npm...

EUVD-2025-179665

Malicious code in comet-norma-semantic-release-rest npm...

EUVD-2025-179666

Malicious code in comet-mutation-commitlint-csrf npm...

EUVD-2025-175871

Malicious code in troposphere-comet-changelog-html-webpack-plugin npm...

EUVD-2025-179657

Malicious code in comet-rehype-transport-entanglement npm...

EUVD-2025-178973

Malicious code in exoplanetology-comet-mira-query npm...

Malicious code in robotics-proxima-thuban-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c49c583566ab4a988020e91856a8424efde07c79821afab4121ca10ecb8ed77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178118

Malicious code in levels-await-postcss-comet npm...

MAL-2025-190369 Malicious code in xenon-comet-xo-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 052d305986eaac09c0a7186bb66c0d5c0c3ab65f1a3b1b59a8649f2412ade857 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...