Malicious code in exec-thuban-farout-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a5e0f5863dba7b13ecdb47a3d26a8bfd96552671904133c0e357bc0b6071099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121671

Malicious code in standard-eslint-plugin-mutation-standard npm...

EUVD-2025-124694

Malicious code in mutation-ganymede-proxima-eslint npm...

Malicious code in husky-upgrade-soap-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 601c73ad9ca5a7963e14be01345e21f536a67da6422a2d129b0e73e809c78799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124700

Malicious code in mutation-chromedriver-postcss-loader-proxima npm...

Malicious code in nuxtjs-redis-fork-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 441db8c593976479e09837ccb82e9319efd093f3a426157fb5b7f92c821c43c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124685

Malicious code in mutation-tailwindcss-websockets-subscription npm...

EUVD-2025-112177

Malicious code in jest-testcafe-stop-mutation npm...

EUVD-2025-121710

Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation npm...

Malicious code in eris-auth-fusion-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63c74e6c4177a2be27c16708c819a8e4889de935df4620a23f9b07e19498a0d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tool-aquarius-juno-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1ae16d041898022924aabc7f30463dde9cf9a13dd7d8407aef91c9a7cdf7be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148462 Malicious code in taurus-castor-alphard-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eae94e2a9377380ef9720cb8a9629ded2f7adf3290f1e4f280445c25def67d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140577 Malicious code in ceres-superagent-sedna-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6d4f07a457df67ef5a49483ad7c134ca928b0e545316389b55502ad45407669 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140953 Malicious code in commitlint-auriga-xenos-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cb906d86cc0ce4b7f22a79fc879e93b1bbbb1edcf8e8ec7e38e60c024b69811 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145225 Malicious code in mutation-levels-antares-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6da819c1be7de811f097b3936686090bdd2d7f1d341d84ca575fa6572b3d753 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141487 Malicious code in deimos-alphard-nestjs-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb2a1db44cbf758c023fddc4953d43953b89647c6ce1a2f527ecdd091804b012 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149003 Malicious code in upgrade-bellatrix-luna-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85dc522606bd3cd6fa13c74d69567d1c35e65f9d1959258be06cf34abce7f7cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144136 Malicious code in kaus-auth0-dione-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e8daa66d3ad3bc016afc3ec7e198370914aeb3104fbc6b0d6d953e52ed5be7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141141 Malicious code in cors-venus-ganymede-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f72ad5f784dee940ad28978b1bd0d8d0fa2406b3ede5cb29dda4a9d2647f9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...