Malicious code in farout-neptune-dione-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c0c1d2d632485105b695892cfdf331ec228fa9c0c4b44667c6207987bd0b91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114212

Malicious code in electron-builder-cassini-mutation-postcss-loader npm...

Malicious code in umbra-mutation-morgan-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f51402fb8b8c25416667a5b7b23d3fe2005b81480481f1b4b256cb4a9f4c822 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120168

Malicious code in yakutsk-config-mutation-ursa npm...

EUVD-2025-112919

Malicious code in hapi-mutation-kronos-deimos npm...

MAL-2025-146401 Malicious code in postcss-loader-mutation-command-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb9a3c6adcf58d65fce9eab22e16677edddfe56f8801398ceceaf8095c67cb4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142108 Malicious code in epimetheus-solis-perseus-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 415a02f6ef7c9186bc59da0060c5f4eb21123c0ea1bd1513028d932bb8964e36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139862 Malicious code in babel-inquirer-luna-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38df1c945aa945c9dd792f46532d5559c541240ced77f7885300dabc208c963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148686 Malicious code in titan-nashira-achernar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4483f30bf3af73574f51a767375f451474ab54c0ac90c82e2e69c9fcd2d14b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148859 Malicious code in typeorm-toml-mocha-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cb6c01a744d2a87102e2f7a4c1544a42bf5ce2168f0ef424b8ef24f9adddda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140219 Malicious code in bulma-mutation-server-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e33c9fe09bdabfbe33847cdc28274813f327e3a1bbc8730cd30684270260cedc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140636 Malicious code in chalk-elara-mutation-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1515b30dee8c82bfcebcb435e5df8978d0fc0d4f8bca09af47446eaa856d90dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146475 Malicious code in prettier-plugin-markdown-async-taurus-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d625e1e6d14f36eb8303b64de0589d97be599d9b9217d167f908927d88dc6476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144091 Malicious code in jwt-webdriverio-pulsar-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 216b2edecfd28fe0ce40416480e2ede3426f58029ef3fc875e276e21ea492fef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141773 Malicious code in dotenv-safe-public-puppeteer-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7456e281adc481a1ca201e721d3fe84c7346df5388c89034a25d87af3201aa73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149483 Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146362 Malicious code in polaris-postgres-sirius-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147540 Malicious code in run-script-changelog-publish-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90543340762c3dc3a715829b13e8c3f5016889801d840eba6365aa107803080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148106 Malicious code in spawn-sirius-venus-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4135237922c194529580f1e2d58a8ea86cfeaeafd6f22e5821f21fc7240da818 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...