MAL-2025-141569 Malicious code in dependencies-hugo-phenomic-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120822

Malicious code in venus-dependencies-ceres-yonder npm...

MAL-2025-141564 Malicious code in dependencies-comet-polaris-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de32a2d0c01195e97714445a47d6e4fcb993f4ee8e1fb6d7442b5415df80ac0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142176 Malicious code in eris-meteor-dependencies-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c16ac3e6ae7e90a0087a8a38f3156c3bd5a3d49c09f8f8e770b9b6508b164fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143109 Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141580 Malicious code in dependencies-restart-luna-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123830

Malicious code in perseus-kinetic-mongodb-dependencies npm...

EUVD-2025-116341

Malicious code in avior-apollo-oauth-dependencies npm...

EUVD-2025-120977

Malicious code in uninstall-apollo-gacrux-dependencies npm...

EUVD-2025-124496

Malicious code in nextjs-react-bootstrap-dependencies-nova npm...

EUVD-2025-114527

Malicious code in dependencies-rimraf-orbit-antares npm...

EUVD-2025-115752

Malicious code in callisto-winston-socketio-dependencies npm...

EUVD-2025-114523

Malicious code in dependencies-thuban-gulp-command npm...

EUVD-2025-114519

Malicious code in dependencies-xerxes-gulp-equinox npm...

Malicious code in dependencies-jovian-bellatrix-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4193ad1c539fe1ae2c569013d91c8c6e73dbdebc46063d995a5035432074d530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114536

Malicious code in dependencies-local-lint-spinner npm...

EUVD-2025-112252

Malicious code in jasmine-prettier-stylelint-dependencies-europa npm...

Malicious code in dependencies-sync-eridanus-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08aa69c1f04a21c437aa1c182048b5f6146d8ac5ee652093cdb056f483f5db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...