Malicious code in server-carpo-carpo-cosmicray (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13b35cab92cb87cd2a1275e1e555ba5cd6cc2d672f9915764840e26cd51e296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179545

Malicious code in cosmicray-nova-regulus-eleventy npm...

EUVD-2025-177542

Malicious code in non-blocking-miranda-gridsome-cosmicray npm...

EUVD-2025-178019

Malicious code in loop-cosmicray-repository-entanglement npm...

MAL-2025-186333 Malicious code in cosmicray-andromeda-registry-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f212723cabf9a6a5e57c6a04ccc611ecfa4b9d6aa084c76ac18e7876b219b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prosthetics-janus-cosmicray-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7bf23841069f26bd310036a3ee4214cbe31bba389517fbaaf7c661280e69a65c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-mechatronics-selenium-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da921e05e6fd360c43a4f94406b773772224e6ecdfa6457c1fea2869b6db4b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179549

Malicious code in cosmicray-andromeda-registry-npm npm...

Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177189

Malicious code in photon-transhumanism-cosmicray-neptune npm...

EUVD-2025-177327

Malicious code in parallax-speleology-cosmicray-lint npm...

EUVD-2025-179546

Malicious code in cosmicray-mechatronics-selenium-tailwindcss npm...

MAL-2025-185945 Malicious code in bunyan-cosmicray-membrane-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b4471f65172659b77e077d6695a1c3d2f3f22eaa42d8c5b536dbe439b313924 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179171

Malicious code in elektra-yakutsk-cosmicray-phoenix npm...

EUVD-2025-179937

Malicious code in bunyan-cosmicray-membrane-terser npm...

EUVD-2025-176415

Malicious code in server-carpo-carpo-cosmicray npm...

EUVD-2025-179544

Malicious code in cosmicray-ursa-helmet-deneb npm...

EUVD-2025-176353

Malicious code in sirius-robotics-loopback-cosmicray npm...

EUVD-2025-179547

Malicious code in cosmicray-foundation-nconf-plutology npm...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...