MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114622

Malicious code in deimos-alphard-nestjs-oberon npm...

EUVD-2025-115105

Malicious code in concurrently-deimos-scorpius-kaus npm...

EUVD-2025-121492

Malicious code in sync-wasat-deimos-hapi npm...

EUVD-2025-123686

Malicious code in pino-pretty-husky-development-deimos npm...

EUVD-2025-124809

Malicious code in module-markdown-nightmare-deimos npm...

EUVD-2025-114643

Malicious code in dagda-deimos-janus-lacerta npm...

EUVD-2025-115255

Malicious code in colors-izar-deimos-izar npm...

EUVD-2025-121143

Malicious code in transport-dotenv-safe-kinetic-deimos npm...

MAL-2025-145310 Malicious code in nconf-deimos-postcss-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 865cce33f39643e61e6f6e8ef24989339dfae8ee7032912dd33dfc700f985496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146386 Malicious code in postcss-deimos-express-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a01bdc174dfd05d600759d6d9aab8707546cd8172951c7e942208348b2d8dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149184 Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121032

Malicious code in ultra-graphql-xo-deimos npm...

EUVD-2025-113111

Malicious code in graphql-deimos-vulcan-helios npm...

EUVD-2025-114616

Malicious code in deimos-graphql-procyon-aurora npm...

EUVD-2025-114610

Malicious code in deimos-lint-mini-css-extract-plugin-kastra npm...

MAL-2025-141505 Malicious code in deimos-sass-loader-quark-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52a22eeaf7193178e07572505c50525a46448c1593b64c2716457af244a18411 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121195

Malicious code in tool-dotenv-safe-deimos-magellan npm...

Malicious code in spectron-webdriver-deimos-astro-sync (npm)

The package spectron-webdriver-deimos-astro-sync was found to contain malicious code...