MAL-2025-149272 Malicious code in warp-miranda-dotenv-safe-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80317c7fc94a190b4d25aed1cf7debd1e50850ffdba9006e735040a27210339c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113800

Malicious code in event-duplex-node-config-public npm...

EUVD-2025-113448

Malicious code in foundation-adonis-duplex-bootstrap npm...

EUVD-2025-122416

Malicious code in rollup-package-duplex-superagent npm...

MAL-2025-143646 Malicious code in inquirer-duplex-process-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 915e7cbf95b48a2c8efed1a02fed0f77e49a42ae939fae8791389eff9a7ab0ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-winston-loop-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114324

Malicious code in dotenv-umbra-duplex-proxima npm...

EUVD-2025-123767

Malicious code in phoebe-jasmine-betelgeuse-duplex npm...

EUVD-2025-120614

Malicious code in webdriver-manager-duplex-aurora-wezen npm...

EUVD-2025-124618

Malicious code in nconf-alphard-electron-duplex npm...

MAL-2025-149195 Malicious code in vuepress-aquarius-fornax-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2a3ba18460fa574edc9d017beb864f9c2393908814fc53a05638effd130fb01 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124152

Malicious code in octans-duplex-protractor-thuban npm...

EUVD-2025-114290

Malicious code in duplex-protractor-npm-element-ui npm...

EUVD-2025-122276

Malicious code in sails-duplex-postgres-geckodriver npm...

EUVD-2025-114304

Malicious code in duplex-config-capella-postcss-loader npm...

EUVD-2025-116277

Malicious code in axios-despina-karma-duplex npm...

EUVD-2025-124324

Malicious code in nodemon-test-cressida-duplex npm...

Malicious code in atlas-duplex-astro-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba777d8a797ecbd56772ba0ed6f122615394e758366f76afb97e132efb482194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in duplex-babel-npm-jsonp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8fe1d62d8945bed9474281bed75b3cef1cdb2f36be4c2dab9212839a18f37a18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...