MAL-2025-145513 Malicious code in node-config-kronos-miranda-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ae16a3a44c1202bba281e9ce9367fef3c378fc7b5a59c16eb3b020c2ee73510 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142101 Malicious code in epimetheus-nashira-node-config-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3680ee4ede4d45b354c8e3ae081df1daf439b7b39c5de63cbecbe66cb1ec1eb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112740

Malicious code in html-webpack-plugin-slides-bunyan-node-config npm...

MAL-2025-142426 Malicious code in farout-sync-regulus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab15b377e01838c81e48ce3e12a9f793df1cf6f08a8352491c27361e3411dd96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140136 Malicious code in browserify-node-config-impulse-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1622a7c3fd318e8af35166278adb720713a472b9b5713ac048a0cfb2fcb2107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in perseus-rollup-plugin-xanthus-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40feafaa1939d92d1ca449f23215a2c7eb5567f8c57c4d6ec8bfeed07fc6ad78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124417

Malicious code in node-config-commitlint-element-ui-avior npm...

EUVD-2025-114019

Malicious code in epimetheus-betelgeuse-toml-node-config npm...

EUVD-2025-124411

Malicious code in node-config-janus-version-sqlite npm...

EUVD-2025-124418

Malicious code in node-config-ariel-cosmiconfig-grus npm...

Malicious code in node-config-ariel-cosmiconfig-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8511e6c9da4678fdbcc5910ed10531ec1bf199ca08705ff5cc0ffc8eacc6f05f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124401

Malicious code in node-config-terser-start-morgan npm...

EUVD-2025-120629

Malicious code in wasat-rollup-plugin-barnard-node-config npm...

EUVD-2025-124404

Malicious code in node-config-pulsar-google-weywot npm...

Malicious code in node-config-gatsby-terser-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 514c4395cec647ca12feacfcacdd7e1eb406be1f56351267a9f1f798a8f10ae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148927 Malicious code in umbra-nodejs-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f42250a864c3381b5de4bc77cdc5b6f857514899573093b41f23d83b3c16278 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141525 Malicious code in delphinus-node-config-equinox-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6623f2a96d2cd18057f65d1f01dcc6723a7519e716b23ff5723f92fd99c102b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148262 Malicious code in start-avior-node-config-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67b94b90f7b87c9bcbf8fa48442a4412439280a7051468f929eb40ad950469d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140644 Malicious code in chalk-jest-nestjs-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab344fb3ee584eae4df856234f3fd3843fd7aa00e09dcf066ce25fce9a0fe3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...