MAL-2025-186389 Malicious code in crust-proxima-typeorm-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c6c8e10cd58c712a41d9039c79673888315a901ffedcdff6a4a384ab7aa87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178918

Malicious code in figures-duplex-magnetar-await npm...

EUVD-2025-179234

Malicious code in duplex-parcel-nodejs-membrane npm...

Malicious code in warp-ora-duplex-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d66ff385a22dffe023d98891710432d0c59ead5f5af2c822fff70f98049abf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180297

Malicious code in astrobiology-loopback-hermes-duplex npm...

Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179233

Malicious code in duplex-request-astrometry-titan npm...

EUVD-2025-175516

Malicious code in xanthus-websockets-helios-duplex npm...

EUVD-2025-175650

Malicious code in warp-ora-duplex-jekyll npm...

MAL-2025-186649 Malicious code in duplex-request-astrometry-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2651fe16dc29246ea136b5abe4b863a53fc8361641f4db128a6e69e0911519d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179445

Malicious code in cybernetics-duplex-oscillation-publish npm...

EUVD-2025-177807

Malicious code in miranda-koa-fetch-duplex npm...

EUVD-2025-177588

Malicious code in nightwatch-sedna-cosmiconfig-duplex npm...

Malicious code in duplex-eslint-plugin-apex-taphonomy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2235332a5fb41e922702c24cc78cadd2f0764b74cdef1022c5fb1baebeda86a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179231

Malicious code in duplex-version-polaris-cosmos npm...

EUVD-2025-177262

Malicious code in perseus-carina-duplex-bellatrix npm...

EUVD-2025-176490

Malicious code in scripts-duplex-innercore-mongoose npm...

EUVD-2025-178485

Malicious code in hydra-duplex-npm-ophiuchus npm...

EUVD-2025-179444

Malicious code in cybernetics-duplex-wolf-json npm...

Malicious code in crust-proxima-typeorm-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c6c8e10cd58c712a41d9039c79673888315a901ffedcdff6a4a384ab7aa87f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...