Malicious code in mira-perseus-delphinus-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 370b99d13baa843ec3e6b05367062a9a8f526f0778000ba19ff3e22729a31288 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in solis-antares-altair-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 81f3108b52e57e82f5819ed94c64af83d8e0e7adf6bae76b340b85ae6f7ce636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cli-geckodriver-aether-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18846f63f307e6c3bd0ab988ed29bd9c00e3411f32d9b783a0b8feafd51e01bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jabbah-foundation-auth-sails (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fff1c97910c4a0a152cc3a17478ed0e622af9e547e7e11a92d3795e6aad004b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-commitlint-json-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0023ee1ba06a2691819a2310fba47ceb9d79051089d1ed1ce19b0e5382973aa7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114093

Malicious code in eleventy-zephyr-radiant-subscription npm...

EUVD-2025-123478

Malicious code in postgres-perseus-karma-tool npm...

Malicious code in development-ursa-upgrade-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30680c255c5f3e7ecffae70aeefb414136fe73f579ae9000f512d779efa522f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142126 Malicious code in equinox-meissa-europa-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 971426dab5e1c8b4d75b97a1da56d0a5d22b1e299d60a76669042d42416a363e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145116 Malicious code in module-slidev-webdriver-mocha-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fd99e840b0e0e74e3caec7e7ebf1b86c170b0f4a4a307f300443e590e3d09b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141709 Malicious code in dotenv-parse-variables-axios-rimraf-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74e83a98501868b14b36dc23df3d406f687182616811541cd1317ec9c0d1129 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140327 Malicious code in callisto-cordelia-winston-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21b5408d4585ed37f98fcf6fb078ab382491ab854e3e69db0c57fcc3be607c38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144724 Malicious code in markdownlint-phoebe-aquarius-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97bc05a74a579980324723e78032930d587d6d67a1b120c30a59e228eeb4a720 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149534 Malicious code in winston-wasat-gacrux-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d29e8042d28958d31f889469462bdfb23b076aa1e204eb5b69c1a441fb2ddff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144262 Malicious code in leda-commitizen-markdown-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b8e979a090f60a54fca3f0d3105d850cc6f5ab00b9a750dee625b3aad03d57f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149294 Malicious code in wasat-mdx-rate-limiter-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f0f70be6c63321ba8f99aa21a4539ca8d3c3df796d1581f025866df7308c639 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144870 Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e328f01f93a5d5887cc6910c54acc8b4c6ad9adc906fd77d0ea49a19e5caa52f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147128 Malicious code in registry-fork-terser-webpack-plugin-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e5f80d581068875ac320615ae15a242874ae033d46442d41454a22228f38a50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140735 Malicious code in charon-spawn-miranda-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83962d261eebbf4ab11649fd1ce06459f1df6412b49989eeb3d2328aa7889690 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...