EUVD-2025-114694

Malicious code in cz-conventional-changelog-comet-prompts-link npm...

EUVD-2025-113329

Malicious code in gacrux-style-loader-cache-comet npm...

EUVD-2025-115231

Malicious code in comet-jabbah-airbnb-auriga npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124615

Malicious code in nconf-backend-comet-phoenix npm...

EUVD-2025-115232

Malicious code in comet-gacrux-pm2-middleware npm...

EUVD-2025-115234

Malicious code in comet-event-husky-typeorm npm...

EUVD-2025-116740

Malicious code in altair-radiant-comet-schema npm...

EUVD-2025-124300

Malicious code in non-blocking-sqlite-comet-eclipse npm...

EUVD-2025-116172

Malicious code in bellatrix-comet-spica-nightwatch npm...

EUVD-2025-115235

Malicious code in comet-cygnus-antd-koa npm...

Malicious code in meteor-cross-env-promise-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb174c4e59f8d419248b9974b4055adfa5d6c0cb04323bb9ba94eea030294ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115215

Malicious code in comet-tethys-phoebe-canopus npm...

MAL-2025-147012 Malicious code in radiant-comet-module-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b564dfdedf86f43133b6b49d91c9d6a147c38582bf8da887f6659f1c566f0d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-comet-ganymede-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115223

Malicious code in comet-parcel-perseus-postcss-loader npm...

EUVD-2025-122646

Malicious code in repository-optimize-css-assets-webpack-plugin-comet-fork npm...

MAL-2025-140336 Malicious code in callisto-jsonp-avior-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 908f11f5f4c7839935f96d8f7d7c73ab4922cf0177174f9d9d4877093b50f428 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141687 Malicious code in dorado-halley-comet-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61971e696f00e0b15ae7dbd87ae429aed772439dfcd64995928df915731a459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...