Malicious code in cache-centaurus-dagda-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fbf47d332c11cd772a9c718e7d3d8090f04a3a7423768d277ba1289693344d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114628

Malicious code in dagda-protractor-lynx-corvus npm...

EUVD-2025-114635

Malicious code in dagda-jabbah-xenos-dactyl npm...

EUVD-2025-114633

Malicious code in dagda-magellan-cosmiconfig-forever npm...

Malicious code in dagda-gulp-quito-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38fa31b4443045d2b86867d4fa9fa611f6bc0f4d9c699520e9f00fad3713e9c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114632

Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum npm...

EUVD-2025-114785

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda npm...

EUVD-2025-114626

Malicious code in dagda-repository-postcss-loader-wolf npm...

Malicious code in acamar-dagda-koa-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91ca820a2561e3af6c3516d615cf56b1e30662bed8bbd8fd6d0ea9752e2b338c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116929

Malicious code in acamar-dagda-koa-quark npm...

EUVD-2025-114637

Malicious code in dagda-hydra-centaurus-hexo npm...

Malicious code in dagda-eleventy-phoebe-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225c1557e1ea9c96419fe41d8f0b51e1eea4b7f3759ed6f2064fa5f394724594 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamo-spectron-proxima-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111241

Malicious code in metalsmith-dagda-ganymede-semantic-release npm...

EUVD-2025-121058

Malicious code in uglify-js-dagda-await-parcel npm...

MAL-2025-141479 Malicious code in dagda-octans-airbnb-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d52c4b48266ddbc2d30e438b7ca57c0588832e7159519b162bf2f752252aa7a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141464 Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141485 Malicious code in dagda-scripts-callisto-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a65067c64696414d0b4da2d866416a0e37392a25616c759a9d4a8d485e05a5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141462 Malicious code in dagda-ariel-lynx-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43baaac97bd520e7f17d0dbdea7719aa432bf067d53dade5735d2de85ccbd484 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...