Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113982

Malicious code in equinox-nodejs-csrf-dagda npm...

EUVD-2025-122716

Malicious code in relay-nodejs-gulp-proxima npm...

Malicious code in algol-sagitta-nodejs-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7dc9bd45ef009b6ab43395bebf52be6466adfbaa8040ea661dbe076e5603fca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124354

Malicious code in nodejs-hydra-jest-quito npm...

EUVD-2025-124035

Malicious code in ora-jekyll-nodejs-antd npm...

Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122823

Malicious code in redis-europa-nodejs-rate-limiter npm...

Malicious code in tool-sails-nodejs-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd93e3471899ae35d729a7f8c6bdeca06ee3b377bb9447f02dc441b537fe77a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146533 Malicious code in private-halley-nodejs-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89a15a54cc1eb0ce2d148b3ff7677e250f4387a0900f4a6bdb4e0858a664f377 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146262 Malicious code in pipe-dynamo-nodejs-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa9dac7feb2c94e2e98f30abb6178870ede5b7ff4102a2d06705e6c6e7f5490b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145578 Malicious code in nodejs-titan-thuban-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8539e22779886967de1cf80034d2581c2dec1fc51ee6b47274fac4b08eeb6a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145438 Malicious code in nightmare-indus-nodejs-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04fd1cc37d46f1a1f057268f80ac023e3523d32064151e456dbf016869d8c97d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111156

Malicious code in middleware-jwt-nodejs-less npm...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122220

Malicious code in scorpius-betelgeuse-repository-nodejs npm...

EUVD-2025-121885

Malicious code in soap-winston-antares-nodejs npm...

EUVD-2025-115023

Malicious code in convict-query-nodejs-prettier npm...

EUVD-2025-113393

Malicious code in frontend-wasat-nodejs-nightwatch npm...