MAL-2025-149797 Malicious code in yaml-nightmare-command-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22757024aa3a3d10664748a50311b9182e726fc4abcde0b54f43b750cb3c57c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147359 Malicious code in rest-nightmare-postcss-loader-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a32ad78d5c1b5a3137b663ae91f27e0355dcea0816dbe228c0eebaa243099d81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140762 Malicious code in chromedriver-await-enceladus-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b544cd03ff385e714b7cd27f9fc9b522f3926092527344be2f153f530040db4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145440 Malicious code in nightmare-nebula-axios-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2597649307233fc7e02c398dd6aa688e4964b170be8ec32aeaf0852589d735e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145429 Malicious code in nightmare-build-norma-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b11f854a4c15692adeee2baff8f05d8ac9ad20ce7c7f5c2bbeaea5ed73bcbf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143119 Malicious code in gulp-nightmare-postcss-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 100e04c09f791909f37fc08b18b6c1c118ce6c84eb94a477f339f2bd455a5caf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145428 Malicious code in nightmare-backend-babel-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91103deb94c614fbd1a4df900ba457667e63c12a896906cbb59532aa2c131aaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139447 Malicious code in antares-vuetify-nightmare-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb05e72399b628edf6a0b1f2964386424efab1b44c0b544971072d2594867b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145431 Malicious code in nightmare-cli-ursa-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c815f45736f8f59bd1582476c431a200edfecc2b39875a5ab386550f4e203eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in scorpius-ganymede-nightmare-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae12e449d265be6e4b1a35c89efc5d35302db289e4f40e82041ae3ce04801cc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-envconfig-nestjs-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ce283718877e46946175f033597ea72cdc7ff55bfdf108784806ef510eb5bbf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123066

Malicious code in puppeteer-nightmare-lynx-mongoose npm...

Malicious code in nightmare-start-iota-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7acdaa494b3ea3a94bef6251589986bbc15dbfefeb3734679f22bf2081462050 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111700

Malicious code in link-meissa-colors-nightmare npm...

EUVD-2025-111430

Malicious code in markdown-pdf-backend-colors-nightmare npm...

EUVD-2025-112621

Malicious code in hyperion-nightmare-markdown-pdf-gravity npm...

Malicious code in antares-vuetify-nightmare-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb05e72399b628edf6a0b1f2964386424efab1b44c0b544971072d2594867b78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-dynamo-meissa-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f432e3c88b4f234e7077788b7b05eb8f49ef8c5568c00a24927111eb4f0c3c51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-node-config-update-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c2d285958d9e9c1654d8bb5b3806e3a886b0e3cba0e0e869ed94a7b861673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...