EUVD-2025-115237

Malicious code in comet-config-pyxis-blitz npm...

EUVD-2025-115217

Malicious code in comet-stream-gatsby-wezen npm...

EUVD-2025-114221

Malicious code in elara-style-loader-comet-async npm...

EUVD-2025-111353

Malicious code in mdx-comet-vortex-karma npm...

EUVD-2025-115222

Malicious code in comet-prettier-stylelint-sync-perseus npm...

EUVD-2025-121688

Malicious code in sqlite-release-it-markdown-pdf-comet npm...

MAL-2025-141889 Malicious code in elara-style-loader-comet-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ab4c1c4efa7b3926279345b2e9565aada7886b972c1b9b8ce7413517ab3c5ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114619

Malicious code in deimos-comet-ganymede-native npm...

MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141075 Malicious code in convict-hercules-comet-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5786dc2bd60bfdccbe5e268b683b5b9c3f489b85c479fa537c5154dedf4949d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140874 Malicious code in comet-event-husky-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d106946017d4e4f863622b3e6fabb769bf7517907828720446c9f69f07e589a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139362 Malicious code in altair-radiant-comet-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc2aa8d1279b2b923e8a549372a45c9413fd69d357c13a65d0aede79fe767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140411 Malicious code in carina-impulse-slidev-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09ae1f871514ee10efacea0fa8c481ee0c8e1e234293b01a5215f6c2c8d3e048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116880

Malicious code in aether-achernar-comet-pyxis npm...

Malicious code in pino-pretty-comet-apollo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce0fc55dc02578c07a1ca82888f7559c7f7490d510463dac842eddb8680878a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122558

Malicious code in rest-rimraf-auth0-comet npm...

EUVD-2025-115380

Malicious code in charon-mongodb-webdriver-manager-comet npm...

Malicious code in comet-mira-lyra-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c9a1aeeac3691d5a766fdca3a7307d890a9cf2c5a2f47a2dee1a19284483fd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...