Malicious code in ganymede-prompts-winston-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d922a8b575251ccd228020bd96d9fc1ecd073d80ad488afda156f36546484946 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mysql-pegasus-restart-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e7009905cb8f53560de954853c4d20a219c322493bc7f7bc00c89373ad493a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-aquarius-juno-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ae16d041898022924aabc7f30463dde9cf9a13dd7d8407aef91c9a7cdf7be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chariklo-zenith-proxima-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in backend-npm-jwt-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09136761d6da122525a069f277501a34c59bd81659e1a421f38a2c0fb946a205 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auriga-babel-ceres-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28d45d234dcd5dce8347016dad2d69193815a03f58182ce50419b00a8c02ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-bootes-dependencies-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d47714b8324929c7ccc1c8f04907ac525d8457224ff36b522c46d41fee2d5849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yaml-arcturus-postgres-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328014f3eea8432fccfec2d92b8ea016e420ef7d3d74b9c0b304d13eabee4d02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-radiant-buffer-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc2b0e8909e37ffb7611e51a5a0d1e31f10eaffec7ffa942ce0774a9d78860af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gravity-centauri-helios-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdfd1d46cfb1e79a472555538c03f5c65bfa51c324508eef833111f42ef5c741 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111557

Malicious code in loopback-mutation-sagitta-titan npm...

EUVD-2025-114212

Malicious code in electron-builder-cassini-mutation-postcss-loader npm...

Malicious code in fork-eslint-plugin-procyon-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bf6096faa5e10b2c385f98c2600967ae8fad4414fce255c69a7c8ae1ad0d863 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114291

Malicious code in duplex-procyon-polaris-mutation npm...

Malicious code in bootstrap-foundation-rehype-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f123f6cfaa91f9978bdc24cca9623e08d85340a93961fc3ad11dca2454b73e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123538

Malicious code in postcss-charon-antares-mutation npm...

EUVD-2025-114899

Malicious code in cosmos-mutation-eslint-vega npm...

EUVD-2025-124702

Malicious code in mutation-altair-readable-janus npm...

EUVD-2025-115885

Malicious code in bulma-mutation-server-ariel npm...

Malicious code in sagitta-io-mutation-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 371f55220e95098b087da7207d9ee1aad74ad9828791e58d89763a4c18cb07f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...