Malicious code in install-spinner-dagda-fusion (npm)

Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in dagda-fusion-altair-rest (npm)

Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious Package

Overview dagda-fusion-altair-rest is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114640

Malicious code in dagda-fusion-altair-rest npm...

MAL-2025-143686 Malicious code in install-spinner-dagda-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13c279966d85af2513de0e15fb02e3c285bc0569db9813fc0f1d2194166881e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112427

Malicious code in install-spinner-dagda-fusion npm...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...