MAL-2025-145769 Malicious code in octans-duplex-protractor-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325c46227e7549eef871805090f80ca444787dccb12bc4f3e8e48f8bd1393053 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141804 Malicious code in duplex-browserify-magellan-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113447

Malicious code in foundation-aether-fornax-duplex npm...

EUVD-2025-114302

Malicious code in duplex-duplex-nightwatch-dagda npm...

Malicious code in janus-meissa-duplex-airbnb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e7a4039a5d6413d95e4eae7fb97136fe2aea00c3a1fe6fededc4daff50e582 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149369 Malicious code in webdriverio-fornax-duplex-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d6c6c69309a6e97ba9068bd9dc84fc3a380e219ae32e32a0cd777771a2bc12a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116277

Malicious code in axios-despina-karma-duplex npm...

MAL-2025-141815 Malicious code in duplex-lyra-ganymede-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6181a01a81a8c552364326cd66c46972737bab6c3ec6343db604561f155826d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120493

Malicious code in weywot-enif-bulma-duplex npm...

Malicious code in duplex-winston-loop-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74a43e2d71c5eae6cd6f7c189f43194e31c47478b8fe2987a3495d58736c1caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2024-54156

Malicious code in bioql PyPI...

Malicious code in barnard-sequelize-buffer-duplex (npm)

The package barnard-sequelize-buffer-duplex was found to contain malicious code...

Malicious code in configstore-oberon-proxima-duplex (npm)

The package configstore-oberon-proxima-duplex was found to contain malicious code...

Malicious code in dendrochronology-gulp-auriga-duplex (npm)

The package dendrochronology-gulp-auriga-duplex was found to contain malicious code...

Malicious code in duplex-gemini-resolvers-norma (npm)

The package duplex-gemini-resolvers-norma was found to contain malicious code...

Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...

Malicious code in capella-heka-deneb-duplex (npm)

The package capella-heka-deneb-duplex was found to contain malicious code...

Malicious code in soap-pegasus-prettier-stylelint-duplex (npm)

The package soap-pegasus-prettier-stylelint-duplex was found to contain malicious code...

MAL-2025-43452 Malicious code in antares-stream-duplex-lightyear (npm)

The package antares-stream-duplex-lightyear was found to contain malicious code...