Malicious code in command-fetch-sagitta-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 886152bb1e80cce3c0d2c55fd7465b1020c44e96c881ac2cf8721beb2ae0b97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112176

Malicious code in jest-venus-fetch-firebase npm...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-113671

Malicious code in fetch-deimos-acamar-lynx npm...

EUVD-2025-113679

Malicious code in fetch-await-epimetheus-pegasus npm...

EUVD-2025-112389

Malicious code in iota-fetch-cressida-kronos npm...

EUVD-2025-111585

Malicious code in loop-ophiuchus-fetch-antares npm...

Malicious code in loop-ophiuchus-fetch-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506250f20544e8ea50d856e84eda191a6177d7846e809be15c6038a85dde340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124298

Malicious code in non-blocking-start-sequelize-fetch npm...

Malicious code in fetch-celeste-link-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecd7a1846ff262e5c7b508f4b84abf81c837205c5ccd7d9dc7f3b32ee0d35ea0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

EUVD-2025-113674

Malicious code in fetch-chalk-mysql-ganymede npm...

Malicious code in delphinus-elara-arcturus-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40e31c55e192550433235a3c031a4cda8b30ee9f66224b49942a341e0b5a126d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113664

Malicious code in fetch-husky-slides-sedna npm...

EUVD-2025-113423

Malicious code in framework-oauth-postgres-fetch npm...

EUVD-2025-116236

Malicious code in babel-kronos-xenon-fetch npm...

Malicious code in helmet-fetch-forever-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f391ec557d8ee6b9bfce69e1b4b34811b1c8d9489505d4781de415a10601aa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-fetch-corvus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1033edc9f74841360f05c0f9c2f6b62133e43f267042e802c53f48e1b302043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139324 Malicious code in alphard-fetch-corvus-command (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1033edc9f74841360f05c0f9c2f6b62133e43f267042e802c53f48e1b302043 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...