MAL-2025-187354 Malicious code in hexo-phenomic-odin-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e24f316c2017efbe3858a178ba430fa5b15695ba388d42bc7350613d60c043be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-chakra-ui-phenomic-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13b33c27a1c1db0a48758f62868c7102a48a907afe4448ee7cf56dd1673ef0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115429

Malicious code in changelog-prompts-perseus-phenomic npm...

Malicious code in phenomic-got-uninstall-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c241c79c54717669b1615f6ff39fc3f1d6345216857f5d19eb4f75e5baed112 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124683

Malicious code in mysql-algol-phenomic-sedna npm...

EUVD-2025-123791

Malicious code in phenomic-dorado-bulma-taurus npm...

EUVD-2025-124390

Malicious code in node-sass-cli-phenomic-webpack npm...

EUVD-2025-120153

Malicious code in yakutsk-registry-phenomic-node-sass npm...

EUVD-2025-123785

Malicious code in phenomic-json-nodejs-configstore npm...

EUVD-2025-123789

Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin npm...

EUVD-2025-116263

Malicious code in axios-spectron-webdriver-jsonp-phenomic npm...

Malicious code in ganymede-rest-phenomic-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ed7963fe55bbca47672ca7abce137c3ae49e070fccf341b8686bf940e6b9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116021

Malicious code in bootes-install-impulse-phenomic npm...

EUVD-2025-111998

Malicious code in karma-phenomic-standard-mdx npm...

EUVD-2025-116468

Malicious code in async-phenomic-cygnus-markdown-pdf npm...

Malicious code in postcss-loader-telesto-vulcan-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2d032771765afdffab124f10a56de31b135824b7fdd9e795e2ba150faca6d14 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123795

Malicious code in phenomic-ceres-uninstall-nodemon npm...

Malicious code in phenomic-spectron-webdriver-sqlite-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57cf050f5999ef136c62aab938cbfd67f9f963f2486f67de8c022e43e54ed973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-capella-jabbah-phenomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79e1bad8467190852c493002cd67a7360ff1149c14ec334228073775c07a0807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-ceres-uninstall-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 18e46df6ac51c8d7445b7bd05abfc596bad25b952eaa26ab0106c78d1ab1f3aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...