Malicious code in dependencies-jovian-bellatrix-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4193ad1c539fe1ae2c569013d91c8c6e73dbdebc46063d995a5035432074d530 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149649 Malicious code in xenon-loglevel-dependencies-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 547ad8a76a0c927609f542c4e8499f14c5106f04ae721ea5b396d3f82f12586e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141572 Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143037 Malicious code in gridsome-dependencies-hugo-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34cb118dfb512914757607f2581b601773b46370aa44eedf0fd97b506eeb430c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140354 Malicious code in callisto-winston-socketio-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dcc61cda68c18f9ee8fdafde47a595f3676d0480aa45bc379dd3acb84c0592d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141579 Malicious code in dependencies-request-private-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac9eb5412192c45323c5da75be6263a84f0ffc0061d8102030656c4b59e9c859 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123603

Malicious code in pm2-zenobia-dependencies-phoebe npm...

EUVD-2025-114519

Malicious code in dependencies-xerxes-gulp-equinox npm...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111924

Malicious code in koa-dependencies-jabbah-telesto npm...

EUVD-2025-122332

Malicious code in sagitta-dependencies-helios-kinetic npm...

EUVD-2025-113506

Malicious code in fornax-apollo-dependencies-sirius npm...

EUVD-2025-116695

Malicious code in antares-epimetheus-chromedriver-dependencies npm...

EUVD-2025-116752

Malicious code in altair-dependencies-foundation-rate-limiter npm...

EUVD-2025-114543

Malicious code in dependencies-envconfig-bootes-postgres npm...

EUVD-2025-114541

Malicious code in dependencies-fusion-prettier-cross-env npm...

EUVD-2025-120282

Malicious code in xenon-loglevel-dependencies-request npm...

EUVD-2025-114521

Malicious code in dependencies-venus-install-bootes npm...

Malicious code in gulp-avior-dependencies-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8bbb8705b693d6d52006ef9114367afd014aed87916df93c9cc58b8bc8689ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...