Malicious code in vuepress-pegasus-gravity-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2f30b9d98da16f6d11401b6e3f4e7a2a556ca0adb7e3e59cb98234cbe0a3409 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122760

Malicious code in rehype-auriga-google-gravity npm...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140249 Malicious code in bunyan-nestjs-gravity-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a2945766e719b272c5befa7d59051355b159245ccff670eefbedbfc435046b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140775 Malicious code in chromedriver-init-puppeteer-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49a1d7b193d8a87479483ff68d7ca0e80df416c37632675238e86d325d53a9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143024 Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143029 Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb22033e71a11b9b4e5ea920eae840ead86fee21e944aa895a89667612aee75e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147669 Malicious code in sass-loader-gravity-draco-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0d8a65fc724223d4447a7e5edeb4e86f4caf1d3c491101f9560c8b5752539d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143022 Malicious code in gravity-csrf-shelljs-celeste (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 341f7f2f7872be0850775e6d8315dcf63081cbcf5cc095b0af5b05bd2ef6ad8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143017 Malicious code in gravity-babel-lint-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36a3b28da6c63c75d153189ed52ace7876ed614e4e5a0dd5668034af33cfb653 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144409 Malicious code in link-gravity-css-loader-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a75f70a93f2d197cb9e483e0fb1bcad8f2a0bcddcb8ff63508f3e3bd5dd087ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139380 Malicious code in andromeda-octans-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143016 Malicious code in gravity-arcturus-auriga-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4e16402638aeed0613b6f982c6a3151ec789269a707550d1762c4eb988453a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120211

Malicious code in xerxes-slides-semantic-release-gravity npm...

MAL-2025-148668 Malicious code in thuban-umbra-gravity-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82b5d746437c92b9d5b96323a0656d9a1055a41f64bc4e23bb8156057519e935 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141793 Malicious code in draco-hapi-luna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43ca38f4a170173c94afac1558333ea2d8020e9a3392cf0aadf92300b6959d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146152 Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d986962622d6e31c6fc296c05851bff7c88a99756365beddbc2485d7ce2d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...