MAL-2025-141455 Malicious code in dactyl-superagent-csv-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac37a2b7d4cf959487b6971f5a52dfd4de82f944d66391f5002aadcedb11b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143249 Malicious code in helmet-dactyl-flare-uglify-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57bd1c045b58ad64b757331e6f73aabe93eb2e88d53c053b83f4c13383b3f05b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144023 Malicious code in juno-dactyl-spectron-webdriver-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10155d644f5afcc759ffb2649134e271d66ff9e4bac71be13e262a7c5da6063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149536 Malicious code in winston-yildun-less-loader-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a69a769cca21c2b2a2a822e2da066c9daed6de27648e615f57d6c614b2376b8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141900 Malicious code in electron-builder-dactyl-duplex-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a83d8f4360296ef119b2c24d37c9dcc2f776e60772206aa423b96d8654dd84b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115420

Malicious code in changelog-taurus-registry-dactyl npm...

EUVD-2025-114659

Malicious code in dactyl-prompts-mongodb-equinox npm...

Malicious code in centaurus-reveal-md-ignite-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42ad9a8d97b4b58806b6890b86891c4eefd39717f0342701200db99c387bc1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-foundation-deneb-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45c702b6dd34c82f1f31c9bb8c48269dab9e7a0d5f55905e6e7726ee273f67b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123773

Malicious code in phoebe-dactyl-hydra-uglify-js npm...

EUVD-2025-122325

Malicious code in sagitta-ganymede-ganymede-dactyl npm...

Malicious code in xerxes-xo-solis-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0164ca9967e0ab9e000da1da046f92a8d4537075e2683a1fc23f0949924b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113985

Malicious code in equinox-kronos-kinetic-dactyl npm...

EUVD-2025-124689

Malicious code in mutation-puppeteer-dactyl-morgan npm...

EUVD-2025-114662

Malicious code in dactyl-meissa-cordelia-rehype npm...

EUVD-2025-111426

Malicious code in markdown-pdf-dactyl-ini-fetch npm...

EUVD-2025-114663

Malicious code in dactyl-lint-staged-achernar-build npm...

EUVD-2025-120564

Malicious code in webdriverio-dactyl-node-sass-electron npm...

EUVD-2025-115349

Malicious code in child-process-uninstall-mui-dactyl npm...

Malicious code in dactyl-fornax-procyon-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b632d855d628750ec5ddc2cccab2ee4373f7dccc662f9bd6ffa8791a5e938e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...