MAL-2025-139862 Malicious code in babel-inquirer-luna-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38df1c945aa945c9dd792f46532d5559c541240ced77f7885300dabc208c963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146362 Malicious code in polaris-postgres-sirius-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124687

Malicious code in mutation-rest-mongoose-castor npm...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

MAL-2025-143908 Malicious code in jekyll-jsonp-slidev-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7d2c19ffc072417b88e79594ce1548a2caa26fb7c0f04a4431f02b23a697f7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116349

Malicious code in auth0-mutation-websockets-ophiuchus npm...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...

Malicious code in avior-neptune-io-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 159acacb064f7f4b882ac1b31bf36ebd3aeb9ab58dd49a8c614929e0aaedb33b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124689

Malicious code in mutation-puppeteer-dactyl-morgan npm...

EUVD-2025-124702

Malicious code in mutation-altair-readable-janus npm...

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26a3d4d5f839eabf76c1685618852ca8f8e47c947a0394f2e9ae352f14632373 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deneb-public-lint-staged-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5f757976b5c1d33d87826c3fb999e29d6ecc67ca0b190cb803237d8aeaa20d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-cluster-betelgeuse-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8566c2ab12a83f43b06b438c52d6e0cedc4ae293d1a73f53300b8db6e9422b08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121622

Malicious code in stop-slides-mutation-non-blocking npm...

Malicious code in protractor-rocket-terser-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6784835499ff275075838e347dcf3d09c0983db7b6cf15dada34f13e5f0e66a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113027

Malicious code in grus-canopus-mutation-quantum npm...

Malicious code in auriga-babel-ceres-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28d45d234dcd5dce8347016dad2d69193815a03f58182ce50419b00a8c02ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...