Malicious code in andromeda-toml-norma-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25fe696f1278a9019e467586cc3593dbe3da702993f1657696c7200984b89c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124038

Malicious code in ora-europa-tool-norma npm...

Malicious code in dotenv-safe-norma-hydra-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101d7f2d3887b13730933645915b85902ce437343b70cafd0c90a2da7a4e3312 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loglevel-xenos-norma-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb2344b956fa9c662f301c31ca881fe491b0221853b2e0871fcd45a7167bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124288

Malicious code in norma-aether-thuban-triton npm...

Malicious code in config-meissa-norma-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 692c94f05f479b00cfdffb8008e1a952b1fdc7cc8b7bf1dd3f47df2e1a4beabe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111591

Malicious code in loglevel-xenos-norma-winston npm...

Malicious code in transform-norma-flare-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9685efa450029c0745cb676603c2b786a4e491760c5f9542c5107d9925439b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122391

Malicious code in rollup-proxima-norma-less-loader npm...

EUVD-2025-123252

Malicious code in prompts-mocha-norma-testcafe npm...

EUVD-2025-124492

Malicious code in nightmare-build-norma-pegasus npm...

EUVD-2025-115344

Malicious code in chromedriver-commitlint-norma-less-loader npm...

EUVD-2025-114344

Malicious code in dotenv-safe-norma-hydra-pulsar npm...

Malicious code in package-norma-thuban-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87a75ce577389fd332b3db5687497106b3602eb875ddc4098e237e88b7712e99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-122711

Malicious code in relay-virgo-native-norma npm...

EUVD-2025-112961

Malicious code in halley-jupiter-norma-polaris npm...

EUVD-2025-124279

Malicious code in norma-hermes-javascript-phenomic npm...

Malicious code in cors-chakra-ui-norma-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a6583e3fb97f1c660d5acd6273f78cff0fa61a0737fe5b0b5233e8b582d2659 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...