MAL-2025-187639 Malicious code in juno-uglify-js-tethys-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca3b11671ecb29ff8f1e78656346b4fcd45de13ee2feb8648e6425fdce8d720c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187216 Malicious code in gravity-juno-cors-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c8097a0705bf1ad76bb1607942f6aa70d99247cce4d60a546977d03b5d6d255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121183

Malicious code in tool-nightmare-geckodriver-juno npm...

EUVD-2025-111649

Malicious code in lint-staged-sirius-xo-juno npm...

EUVD-2025-121516

Malicious code in sync-acamar-got-juno npm...

EUVD-2025-124278

Malicious code in norma-html-webpack-plugin-version-juno npm...

EUVD-2025-112759

Malicious code in hexo-sirius-karma-juno npm...

EUVD-2025-123570

Malicious code in polaris-juno-bulma-pegasus npm...

Malicious code in ignite-babel-juno-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6efdead4ed42f6f74b60a3017dd381e0f65833d1f1c15b4575aafa8193a99305 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-epimetheus-selenium-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be603a6ccdba311fa78ba451f8072a751787808a917f9b9d7795778a7aac3627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123043

Malicious code in pyxis-juno-uninstall-gatsby npm...

EUVD-2025-113148

Malicious code in google-juno-toml-socketio npm...

MAL-2025-144023 Malicious code in juno-dactyl-spectron-webdriver-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10155d644f5afcc759ffb2649134e271d66ff9e4bac71be13e262a7c5da6063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122864

Malicious code in react-bootstrap-envconfig-juno-rate-limiter npm...

Malicious code in deimos-juno-sails-promise (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e4b06a4470db17fd32754a1e07a0049aa27cd7bbe27db48e0a893f47e90d3c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112091

Malicious code in juno-comet-meissa-oberon npm...

EUVD-2025-115519

Malicious code in chai-dione-juno-antares npm...

EUVD-2025-112075

Malicious code in juno-sirius-react-bootstrap-weywot npm...

Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...