MAL-2025-187602 Malicious code in jekyll-less-npm-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2dbfe23271c900f951f36875d53f77f39ffe4fd6d1d97cb14618347003c907cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in on-xanthus-panspermia-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dfaa23e99c9f44a5e3062d69e7746b098ef5f4219ef4ec9a2f8688841a1bdb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189410 Malicious code in sedna-enif-fusion-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 412fab03b211814a517655b8de4f566125d1957ed1c54ed9b9db8e355e080803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176164

Malicious code in subduction-phylogenetics-tachyon-tethys npm...

MAL-2025-189687 Malicious code in stream-redis-bellatrix-oscillation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d28d234dac2b514572f66ad2ad3ccae3cc70103cf5b2461fedbff81f34bb2353 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180023

Malicious code in blitz-materialize-link-lint-staged npm...

EUVD-2025-180151

Malicious code in bad-eta-encrypt-error-signal npm...

MAL-2025-186311 Malicious code in coronalmassejection-asthenosphere-astrobiology-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9cb81f3d331d2861ecc6df39b2c8a84b53696cd5c489d6e3157782d4426db0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188394 Malicious code in octans-yakutsk-dotenv-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d751656f2ac7efe86e47c25583f93d9ae1536daffdceaf849d3483681ba1dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178517

Malicious code in holography-commitizen-kardashevscale-morgan npm...

EUVD-2025-177689

Malicious code in nconf-superagent-public-writable npm...

EUVD-2025-178258

Malicious code in json-docusaurus-terser-aurora npm...

EUVD-2025-176148

Malicious code in subscription-resonance-singularitarianism-procyon npm...

Malicious code in kronos-buffer-titan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792938793257953f6b2ebb196fc67715e7747e88d7f1d9dd52ccf05b0acb5b6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175519

Malicious code in xanthus-got-telesto-accretion npm...

Malicious code in browserify-astrometry-stratigraphy-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245bdbb5c5bf35b2ed8cce928d9902f8c580a23fb021cbe85fddc30550eb7c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in superflare-on-nestjs-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4bc374df6bcd185907d9484f3b7435d95ad6326a7b1eba24209d2443c9e3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177880

Malicious code in metabolomics-cross-env-antares-run-script npm...

EUVD-2025-178945

Malicious code in farout-convict-meteor-accretion npm...

Malicious code in throw-omega-catch-hot-sanitize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5660c7de16bc52821723bdfd1087c32d214e18bd66d23f006a40f55180fedacd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...