MAL-2025-188707 Malicious code in pino-pretty-prettier-sequelize-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e3bde5720db4c2110dd2e282776b87cae97883f7ed7cd03ed524b7a0c027d9e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176708

Malicious code in release-it-nova-orbit-figures npm...

EUVD-2025-178918

Malicious code in figures-duplex-magnetar-await npm...

Malicious code in release-it-nova-orbit-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ab3495ac1d9fef2ffac460dccd2454e48b85c3df2a2fa18a230ee9b876907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178919

Malicious code in figures-duplex-halley-vuetify npm...

EUVD-2025-178921

Malicious code in figures-archaeoastronomy-hadron-enif npm...

EUVD-2025-177333

Malicious code in panspermia-seismology-yildun-figures npm...

EUVD-2025-180191

Malicious code in await-figures-nodemon-genomics npm...

EUVD-2025-178914

Malicious code in figures-middleware-proxima-jabbah npm...

EUVD-2025-177168

Malicious code in pino-pretty-prettier-sequelize-figures npm...

MAL-2025-186517 Malicious code in deimos-koa-build-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a36c41fcb310eff78aafc5e8df244c1040a53162533a3e6f7026cd926873e7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186803 Malicious code in eridanus-antimatter-figures-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc9f078e333a05d5703ffb66d84694f1b93317ddb74c0ff6cd1be5c855ec5899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180029

Malicious code in blaze-figures-auth0-proxima npm...

EUVD-2025-178555

Malicious code in helmet-release-it-enceladus-figures npm...

EUVD-2025-178917

Malicious code in figures-elara-lithosphere-cosmicsilence npm...

EUVD-2025-176239

Malicious code in sqlite-telesto-commitlint-figures npm...

EUVD-2025-178401

Malicious code in init-venus-sync-figures npm...

Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179079

Malicious code in eridanus-antimatter-figures-dotenv-safe npm...