MAL-2025-185749 Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171049 Malicious code in cometcartographer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6ec7a53ba0176d9e54f2829e13d0bec56aa93d14a0d658bc48f81d6c8e66a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115229

Malicious code in comet-lacerta-config-atlas npm...

EUVD-2025-121088

Malicious code in typeorm-comet-carpo-foundation npm...

EUVD-2025-115224

Malicious code in comet-parcel-gacrux-winston npm...

EUVD-2025-114424

Malicious code in dorado-comet-cypress-ursa npm...

Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-playwright-webpack-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ff48dcf02a3092ea74936fd4d768da0bd9ac52d2f1244f4a15fb194cc208d8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112091

Malicious code in juno-comet-meissa-oberon npm...

EUVD-2025-115226

Malicious code in comet-mutation-hydra-spawn npm...

Malicious code in dorado-comet-cypress-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40d4ba604da581956023e5d77c8441370bd30f016f61f6bb550684dbc237e573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120974

Malicious code in uninstall-comet-orbit-oauth npm...

EUVD-2025-115770

Malicious code in callisto-jsonp-avior-comet npm...

EUVD-2025-115236

Malicious code in comet-cors-procyon-rocket npm...

Malicious code in procyon-chakra-ui-comet-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b714a9f6285ba1b2dd437b87474dc7b762e38cfcf30a34ac0c236b9fa33d42e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115239

Malicious code in comet-callback-eridanus-ini npm...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120388

Malicious code in wolf-comet-dotenv-safe-element-ui npm...

EUVD-2025-115231

Malicious code in comet-jabbah-airbnb-auriga npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...