Malicious code in airbnb-relay-hydra-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5aac16f1f71a40b66a4d15575c7941b18cb0512e745728dd89bc41dabb55d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nova-eridanus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in link-ursa-nova-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d44d6e84b842283cf109ff27c3aac47525e74f91b0b9e53ef219fb4ccfa1c59e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113294

Malicious code in ganymede-regulus-nova-auriga npm...

EUVD-2025-112980

Malicious code in halley-centauri-norma-nova npm...

EUVD-2025-124255

Malicious code in nova-reveal-md-equinox-umbra npm...

EUVD-2025-114904

Malicious code in cosmos-cypress-registry-nova npm...

EUVD-2025-124264

Malicious code in nova-delphinus-npm-janus npm...

EUVD-2025-114758

Malicious code in csv-nova-eridanus-neptune npm...

Malicious code in nova-lyra-io-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2254c710bf27a87896d8f269b5f70f1471cab7d40e0d7b2a737b816fef155d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nova-slides-concurrently-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8349c57f2f166e822672e88378a5b6c838c5bec0b5f8f03aba07f0521268c16c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-cypress-registry-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184be61838d74995e813d28e8d20ce09f8082497818008ecacd08fd16637920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113308

Malicious code in ganymede-impulse-dotenv-parse-variables-nova npm...

EUVD-2025-123768

Malicious code in phoebe-heka-procyon-nova npm...

EUVD-2025-113310

Malicious code in ganymede-hugo-phoebe-nova npm...

EUVD-2025-116387

Malicious code in auth-atlas-oauth-nova npm...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113223

Malicious code in geckodriver-xenon-nova-auth0 npm...

Malicious code in cli-lynx-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e0af512198e413bd0da9e0fbed417f8a39382fb085a429d28eaec3405abc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...