Malicious code in figures-middleware-centaurus-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed8a57bf5c1a467cb3057d957940dc0b42c95b9b657a545064bed0abd5d9a4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-gacrux-pm2-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7729116efe483cf849c752a73e89d5216af77a6872c275da676077adbf09f1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

Malicious code in middleware-weywot-eslint-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a88c9b0d592888a18027b9fe9f06c0a29b5cf294a0a93073b116f95bcb23295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111147

Malicious code in middleware-weywot-eslint-readable npm...

EUVD-2025-111166

Malicious code in middleware-blitz-mutation-transform npm...

Malicious code in grunt-promise-vuetify-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b7391023fb97db27e60952bee597e73cca8d4958978321dea8fc85e8695ad64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-eslint-pavo-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d5177b0597023c87477f7e642b8c1decf833335903750003c50a01975616f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in middleware-jasmine-nightwatch-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b8766d8d60ad74c2cf23402725bb2b7a3c14dd9413d43c03914e39a047fd977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111160

Malicious code in middleware-eslint-pavo-got npm...

Malicious code in antares-mensa-husky-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ab52c87195be1a836587e78a7a2e6c142f506ba8f5d53355404fb5772ed274 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111171

Malicious code in middleware-andromeda-yaml-inquirer npm...

MAL-2025-142504 Malicious code in firebase-middleware-websockets-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965718b2e69e8cd0837618529f0dff3b16fdbfef7b4cc2473c9574fa1aed806c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148009 Malicious code in slidev-mongoose-middleware-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e740fbc701afa1668b536493648225563f609e28680c2dced973d44fa761e5ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140813 Malicious code in cli-ursa-lyra-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 404b7635e00676f5a1f01eb0daf4d7a14be165f5c23502d43264abd963cd7c7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140664 Malicious code in changelog-concurrently-subscription-middleware (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f83b2e12272a8e785079ce5d459cca1a904c1e9310d88115531e97fbf868592c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144964 Malicious code in middleware-schema-venus-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c9d42a35eecf79615d3e6a383a4660f2e51cc22fd1bb17616a609764d1b1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146225 Malicious code in pino-middleware-zephyr-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d06a3a7b8dcf2aafa9df282862719f4c6d00a49414d8b4e87a1b0f1b729ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149064 Malicious code in ursa-middleware-express-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba207fd9cd33feba39f2088ce036150bd5cfd54db1cbb8c7b108f8a6b527c224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...