EUVD-2025-112361

Malicious code in izar-capella-deimos-enceladus npm...

EUVD-2025-112339

Malicious code in jabbah-deimos-fornax-webdriver-mocha npm...

EUVD-2025-112142

Malicious code in json-docusaurus-cosmiconfig-deimos npm...

EUVD-2025-111897

Malicious code in kronos-deimos-regulus-warp npm...

Malicious code in antares-cressida-astro-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083a2e240bd569f359ce0153cdcd1078b75e23b0cb92a3fab70d2aabb5c2194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in apollo-deimos-resolvers-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9ec7b46ef720beef5b501825b566d56e9bcc122d56d656cf82e0eea918a75a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-xanadu-deimos-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7f44508c82652976c4e53f82e197081f45973be86a711dab05db353c389cbfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-izar-deimos-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ade47e5512f5d5ea7ae6f5275ef4dd11f9b97b478c61a8fe6376509bf39e0e2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-comet-ganymede-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ef3a69785ee560c1abd0a6e38107477d33b1462d52e8de5ad903da881e50f73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-lint-mini-css-extract-plugin-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 807c02587c8bfdfb4a5cb0891d69ef15f034064df3bdd7fc4dbc4172fe0544af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-mdx-publish-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191cae5a5020a0919ae5a62e6668e0bc50d53f30c98d7c2746f1d3d86bee39fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in json-docusaurus-cosmiconfig-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 75a9c7c0cb232f49b5048a19ae36888fbf26e1cd53ba27072f1a10a5c6de44de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-airbnb-deimos-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f752fa734e2490fe968e90b4d52adc3051e7439e54ad5906eb124cad4812e8eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-fomalhaut-less-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb8383b61773b5aa6e2d7e266beb1e5d0d03731d8d57cbef93747ba115ed2749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sequelize-deimos-cressida-hapi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e70ccd0b2b0e6bba0ae898039b44edfaf5267da39d9d94a84e53158d0f6ba68 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...