MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113655

Malicious code in fetch-quasar-jabbah-superagent npm...

EUVD-2025-113678

Malicious code in fetch-bellatrix-celeste-jwt npm...

EUVD-2025-113673

Malicious code in fetch-cordelia-mutation-equinox npm...

EUVD-2025-123790

Malicious code in phenomic-element-ui-publish-fetch npm...

EUVD-2025-113660

Malicious code in fetch-meteor-leda-materialize npm...

EUVD-2025-120330

Malicious code in xanadu-miranda-fetch-aurora npm...

EUVD-2025-113676

Malicious code in fetch-bootes-concurrently-phoebe npm...

Malicious code in fetch-virgo-nashira-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5313f53f3f660bb8e9d871ae08b0f9251fc9200b75390bae8273643364e9b20c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113659

Malicious code in fetch-polaris-loopback-registry npm...

Malicious code in ini-delphinus-fetch-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 685d40676848a894fe55a348008ca0bd6c6005b42422e1675050fcd0adb0f43f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112120

Malicious code in jsonp-charon-warp-fetch npm...

EUVD-2025-112209

Malicious code in jekyll-fetch-lyra-lint npm...

EUVD-2025-113669

Malicious code in fetch-europa-schema-leda npm...

EUVD-2025-112906

Malicious code in heka-jsonp-triton-fetch npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

Malicious code in config-izar-fetch-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5a2d8fc86c6915594384794a9189606b65ba1f652cdae1d45debe45640afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-hyperion-fetch-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979751ebbb94ecbe8b8bb6dec006ea4ad7472bb3a937f29d66aafef26dcb908b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...