Malicious code in oberon-centaurus-eclipse-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab928e91bad85f7e109af50b8b181746c36455110c206e998eb3ec3cb8fc7a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112919

Malicious code in hapi-mutation-kronos-deimos npm...

Malicious code in avior-neptune-io-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159acacb064f7f4b882ac1b31bf36ebd3aeb9ab58dd49a8c614929e0aaedb33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-cressida-registry-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 848323cdde2a4eaa6bed6671fbcbafbe9d1ebd010579191a4b1a43554dd28054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-ceres-pipe-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e1f5d475d87b9be1e9b5b9319d5a267f7c1d579104ea2bbd5c75147f6239988 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116349

Malicious code in auth0-mutation-websockets-ophiuchus npm...

Malicious code in aether-sqlite-meissa-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29327f59a8318f6abc51bcfd6abe17a7008f1530fcf43b381c55f14e7d32ce27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124691

Malicious code in mutation-odin-barnard-altair npm...

EUVD-2025-124693

Malicious code in mutation-levels-antares-nightwatch npm...

EUVD-2025-111865

Malicious code in lacerta-mutation-lyra-loop npm...

Malicious code in auriga-eleventy-venus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2496a63bee7beb3167c28e31284ebf45ceda5dc2fe54d573431cd05f1daf2bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120306

Malicious code in xanthus-halley-gravity-mutation npm...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

Malicious code in carina-postcss-auriga-less (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f7eb49ca9a8f5960086bc7093a2e8660219468302235c18df46dce850a980e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113673

Malicious code in fetch-cordelia-mutation-equinox npm...

EUVD-2025-114212

Malicious code in electron-builder-cassini-mutation-postcss-loader npm...

EUVD-2025-124687

Malicious code in mutation-rest-mongoose-castor npm...

Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in despina-build-chariklo-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2e69d006846d8007ebe2b881da6d8832c002a8bcc2fcdc0a56be2d7c4dc362a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in request-proxima-nashira-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104278030a72c3633913dafea9d2872511fc08ef9999259ee4c8eadd3040cf9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...