MAL-2025-143687 Malicious code in install-testcafe-quark-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4974a01ca69fac48c452e695ebc3893a9ca2b8964f0b67369be05735fc7101e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147706 Malicious code in scorpius-config-ursa-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00e7012092e984a4619a97dd81ff1b126c11fa6fd7e39077c8cd467fbf5b3e31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122157

Malicious code in sedna-grus-install-zenith npm...

EUVD-2025-123451

Malicious code in prettier-nightwatch-request-install npm...

Malicious code in dependencies-install-xenon-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 175cd2eca6ada3157adf3a6480fd5aaae846d63b51c649e4c9b450878d26785e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112429

Malicious code in install-sagitta-forever-repository npm...

EUVD-2025-122150

Malicious code in sedna-leda-virgo-install npm...

EUVD-2025-111153

Malicious code in middleware-nashira-install-loglevel npm...

EUVD-2025-112435

Malicious code in install-got-dorado-flare npm...

EUVD-2025-112437

Malicious code in install-europa-aquarius-cli npm...

EUVD-2025-112433

Malicious code in install-pyxis-rest-prettier npm...

EUVD-2025-115813

Malicious code in callback-antd-transport-install npm...

EUVD-2025-114539

Malicious code in dependencies-install-xenon-venus npm...

EUVD-2025-121286

Malicious code in thuban-backend-install-wolf npm...

EUVD-2025-112423

Malicious code in install-uninstall-mira-sass-loader npm...

EUVD-2025-112974

Malicious code in halley-enceladus-install-carpo npm...

MAL-2025-143148 Malicious code in halley-install-pavo-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebf4e6027a9e5ed23f0c187619d11b350f940038da89434376ae24c57a4c84cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148469 Malicious code in taurus-install-eslint-plugin-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...