Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120432

Malicious code in winston-init-public-prompts npm...

EUVD-2025-112500

Malicious code in init-antares-deneb-orbit npm...

EUVD-2025-115771

Malicious code in callisto-init-astro-query npm...

EUVD-2025-115103

Malicious code in concurrently-fusion-init-izar npm...

EUVD-2025-122193

Malicious code in scripts-equinox-achernar-init npm...

EUVD-2025-120384

Malicious code in wolf-dotenv-safe-init-process npm...

EUVD-2025-121752

Malicious code in spica-postcss-init-auth npm...

EUVD-2025-115358

Malicious code in child-process-init-winston-frontend npm...

EUVD-2025-124740

Malicious code in morgan-init-auth0-rollup npm...

Malicious code in init-xenos-forever-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 037cbe531b734ea1d67a651682ecfb3115ec8a3abe390a6a187266e51cbf4a49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115256

Malicious code in colors-init-slides-vortex npm...

Malicious code in spica-postcss-init-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c0dd7516ab206c60ecc4fc90715916d1522813a27c6be01c8e4d65420b4f695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

EUVD-2025-124091

Malicious code in ophiuchus-nconf-init-relay npm...

EUVD-2025-115862

Malicious code in bunyan-gridsome-init-andromeda npm...

Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145790 Malicious code in odin-carpo-init-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84df6db1ad28199f71552122f364b369efb4868373a65e0ed553444b217fb422 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141258 Malicious code in cross-env-init-sedna-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e729a7f1b0789e7b94d947b7ba5acb27a8acd7ae8ba2fa26a5ab8cebd8b37ceb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...