Malicious code in neptune-ini-apex-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37b63ab4631ab55ea26f71c7b50ce32dc848123780edb2d0f6b35e671c557b81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178411

Malicious code in ini-koa-adonis-astrometry npm...

EUVD-2025-180384

Malicious code in apollo-ini-grunt-radiant npm...

Malicious code in yonder-less-loader-ini-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64d24be310a09fbc0c9ea69c806f48c32bc74d179f2b3b70aedfed17bb573b41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180128

Malicious code in baryon-ini-biomimicry-entanglement npm...

EUVD-2025-180342

Malicious code in arcturus-nucleosynthesis-commitizen-ini npm...

EUVD-2025-176707

Malicious code in release-it-perseus-ini-node-config npm...

Malicious code in planetology-deneb-betelgeuse-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d9e76fd68dea4a218da7554c4a828cd8f512e9399f2f98a6ba89184f1e1ac45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178163

Malicious code in lacerta-chalk-ini-neptune npm...

EUVD-2025-176978

Malicious code in protractor-eclipse-ini-subscription npm...

EUVD-2025-178409

Malicious code in ini-quito-stratosphere-slides npm...

EUVD-2025-178412

Malicious code in ini-barnard-juno-shelljs npm...

Malicious code in ini-barnard-juno-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3dbf5daee4a63bb5da7d2edd25d7ce8d9d7bc3d058330917f28aa7374a6ef12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179174

Malicious code in elektra-jekyll-ini-async npm...

EUVD-2025-179897

Malicious code in callisto-cors-ini-puppeteer npm...

EUVD-2025-178553

Malicious code in helmet-sirius-ini-mocha npm...

EUVD-2025-177529

Malicious code in nova-ini-greatfilter-hawkingradiation npm...

MAL-2025-187329 Malicious code in helmet-sirius-ini-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28596c89ad05b7cfce43316b2195edd20ec7abf4c674d1643d0d8217999fb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187471 Malicious code in ini-koa-adonis-astrometry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 814dda9fc098a95449685bf70ed597eaf7718a69688a6739317f7af0058ac94c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186399 Malicious code in cryovolcano-grus-ini-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd0a229347ff016f9d70393ed03e8a4a921a6e4c86a3a5603209a0d4bd75855e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...