Malicious code in meteor-rollup-plugin-io-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50a0b0f70775d4832f652c3f9822fc10a8ee35fe551b2db4b3589bb4703b459 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112723

Malicious code in hugo-io-commitizen-shelljs npm...

EUVD-2025-112414

Malicious code in io-hercules-css-loader-sync npm...

Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113307

Malicious code in ganymede-io-canopus-sync npm...

Malicious code in io-sagitta-morgan-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086f999fc627768d00c1afc5e47ec5cdc6e8a75d0c75e284604f764d0763d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124174

Malicious code in oberon-io-thuban-draco npm...

EUVD-2025-123939

Malicious code in passport-io-gatsby-nconf npm...

EUVD-2025-124026

Malicious code in ora-request-io-celeste npm...

EUVD-2025-112410

Malicious code in io-non-blocking-hermes-mocha npm...

EUVD-2025-112417

Malicious code in io-frontend-jasmine-ursa npm...

Malicious code in sagitta-koa-io-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4851a6afc2d0560423e4f641238690dd6144607978993a528fbaa40438934d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142145 Malicious code in eridanus-ganymede-hugo-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f8dd49354124306d6cce53a0e2081438a175d153f93a53913c5eb90407d1ea1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143706 Malicious code in io-sagitta-morgan-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086f999fc627768d00c1afc5e47ec5cdc6e8a75d0c75e284604f764d0763d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143696 Malicious code in io-frontend-jasmine-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3308e04cfe0933e6fc4337e749c10f0c0bd6ba52fd5827d1fbce22de7792638b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116325

Malicious code in avior-neptune-io-redis npm...

Malicious code in ariel-io-callisto-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e34a4a273f70ddab96ef9dba67cc8c2ea71e655a6a12b591757054a7ccab894 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in io-nestjs-ora-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17c77f7e73b40dd673a983113e9fab42f1f437734bcec372c58f95bdab19c231 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...