MAL-2025-142468 Malicious code in figures-halley-cygnus-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5bfdd47cd57e9ec30a9e0daefae6dced0d48b8bcdec9c70ebcd41b4bf6f3247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113648

Malicious code in figures-comet-markdownlint-markdown npm...

EUVD-2025-112107

Malicious code in jsonp-sagitta-comet-module npm...

EUVD-2025-114787

Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop npm...

EUVD-2025-113604

Malicious code in firebase-playwright-comet-nodemon npm...

MAL-2025-148237 Malicious code in sqlite-release-it-markdown-pdf-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e842ed031476eaff919d2d36c6140df2eafe2aeee5855db59ed82f3128eebfad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121688

Malicious code in sqlite-release-it-markdown-pdf-comet npm...

EUVD-2025-120339

Malicious code in xanadu-comet-nodejs-fornax npm...

Malicious code in atlas-sirius-comet-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97fddec731b84136b26868a5785d71228d094a80260d9bc714df326b31567ead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-event-husky-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d106946017d4e4f863622b3e6fabb769bf7517907828720446c9f69f07e589a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111353

Malicious code in mdx-comet-vortex-karma npm...

EUVD-2025-111385

Malicious code in markdownlint-standard-run-script-comet npm...

EUVD-2025-123340

Malicious code in procyon-chakra-ui-comet-init npm...

EUVD-2025-114170

Malicious code in elektra-comet-kaus-request npm...

EUVD-2025-115220

Malicious code in comet-prompts-elektra-non-blocking npm...

EUVD-2025-115214

Malicious code in comet-vulcan-mdx-pino npm...

EUVD-2025-115222

Malicious code in comet-prettier-stylelint-sync-perseus npm...

EUVD-2025-123093

Malicious code in pulsar-envconfig-nuxtjs-comet npm...

Malicious code in update-kinetic-comet-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d047e35d93dc96f143db92408aba214205928b1528c598917916a50e43055117 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...