EUVD-2025-114221

Malicious code in elara-style-loader-comet-async npm...

EUVD-2025-114545

Malicious code in dependencies-comet-polaris-aurora npm...

EUVD-2025-124030

Malicious code in ora-polaris-antares-comet npm...

EUVD-2025-115237

Malicious code in comet-config-pyxis-blitz npm...

EUVD-2025-111212

Malicious code in meteor-comet-mdx-cygnus npm...

EUVD-2025-116417

Malicious code in auriga-norma-test-comet npm...

EUVD-2025-115696

Malicious code in carina-impulse-slidev-comet npm...

Malicious code in comet-vulcan-mdx-pino (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77f65149a14d2b9622e50849679ec66950763e1cd38846e1c80e2e13fae21197 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114619

Malicious code in deimos-comet-ganymede-native npm...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

EUVD-2025-115233

Malicious code in comet-fomalhaut-dotenv-safe-polaris npm...

MAL-2025-143044 Malicious code in gridsome-hapi-comet-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8cd3cac8edaa9ec5304601d2065302dc6a788f5a38d89ce31ff3053d2f348b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113068

Malicious code in gridsome-hapi-comet-jovian npm...

EUVD-2025-114422

Malicious code in dorado-halley-comet-dynamo npm...

MAL-2025-139362 Malicious code in altair-radiant-comet-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1afc2aa8d1279b2b923e8a549372a45c9413fd69d357c13a65d0aede79fe767b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115217

Malicious code in comet-stream-gatsby-wezen npm...

MAL-2025-145621 Malicious code in non-blocking-sqlite-comet-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4565c829ba2e5b0b1cab2a792e2ee7ab03d4a61f041503d12bef51bd72b837f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

MAL-2025-142783 Malicious code in gacrux-style-loader-cache-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d40fb9bebd1cbc783338d691aedf1b17a93524a2990ac15451501b00098fb68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...