Malicious code in delphinus-leda-polaris-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f6c18328bd4bdbf2c3bc3fc6cd547b636261ffdd43a67ce494a8b2953a26355 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112237

Malicious code in javascript-await-upgrade-venus npm...

Malicious code in inquirer-prettier-plugin-markdown-writable-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aba576cee921af273a381ecdd9f50e7948d25e4e33e507595011c39819ada9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in config-xenos-procyon-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e11ee2587ab693fa07da5ba1b7292c5c142aedc22b57b70a9ab70a5176f3aa6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149173 Malicious code in virgo-vega-zephyr-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d02552b14dde06edeef7b347a403a0d5ea395a9d45f99471afc91942b69d47ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146987 Malicious code in quito-apollo-europa-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b4eb6051a4b9dbc341e909f1b7140e2b5d8827337159c41ee2252851b56fe9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145886 Malicious code in ora-jekyll-nodejs-antd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99ac7ea31cddaef6cbf34ea2f14a323c48b85e8610b6bcf49716db4c0d7a0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149355 Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113868

Malicious code in eslint-plugin-spectron-csv-aether npm...

Malicious code in ganymede-luna-solis-grunt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2bba943fa330cdb3d3878a5ffc09d78a6df573ce8fa64f6f6e36f25fcdd1d8a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124757

Malicious code in mongoose-nextjs-tailwindcss-xml npm...

MAL-2025-141261 Malicious code in cross-env-nodemon-sedna-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7316b299b527b2a7aca15f930a3fdfb9a75ba8c6418bd1cf9278ef08797cd08c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149748 Malicious code in xo-electron-builder-passport-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a4258594833b0af81aec1a8b3b0c76e3583e9312af81300ca476bb04013958a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149716 Malicious code in xerxes-repository-parcel-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f168dfe75d601a991ed88a1e2c0e94f4def5659781b663e517164c6fa7625a4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144520 Malicious code in loglevel-run-script-cross-env-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274bbe00f3f0fdea25171e1d9b6e8028893566b13e1a05f6160aae69d26a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146507 Malicious code in prettier-stylelint-enif-ophiuchus-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb1c36c7e8318e9c03ae9ff620c9c5629c7f9fa3229ad0c5cc87694ef5eae4c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-138877 Malicious code in misleading-red-bear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd494484dfd8d481213be418ca55214d411a83c445c5ade866277dc5fe6a7537 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139088 Malicious code in uniform-emerald-dove (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 845e445dfa88ebac32dc00958705f6a5b81989911b474171c0e9bd428ee3a21c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...