MAL-2025-143381 Malicious code in hugo-chalk-rigel-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33fbcc8a6d77546d8df2d30d0a77c57dca8e17f043376af5bbc204b5e38bbc3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146152 Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2d986962622d6e31c6fc296c05851bff7c88a99756365beddbc2485d7ce2d69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147354 Malicious code in rest-metalsmith-phoebe-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f8177a5231f64f91ad462497824a507ac608aa02801a73de1d55a927c0e339d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145472 Malicious code in nightwatch-leda-phoebe-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e255ef36785234c21c00b9b872a09dc23df76ee5a10435c11ac71e04b7c37b69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142435 Malicious code in fetch-bootes-concurrently-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a73770f8dd611198563c5d0eae11af04fd9b01fbc2d8ab53e3b77989f6c6ac36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142061 Malicious code in enif-rocket-despina-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf55b6c4449d96986c74fe612839facffe21b787d457d641c848b520ebc402b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148823 Malicious code in triton-phoebe-lint-staged-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da62219aeb9b6a9e0c008d8ad616786c15270b713723595780d92d8f0cbd2ecd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140978 Malicious code in commitlint-dependencies-upgrade-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5898bd5cbadcc7c16719896fe4bd6366ecedecc6cc744aedf81ca570c71865e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146358 Malicious code in polaris-phoebe-materialize-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c77c740aa11ca859bb2f0ff0e894580beec61fa56684a200b3bf75cf08ef3ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144578 Malicious code in luna-phoebe-despina-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123761

Malicious code in phoebe-mensa-nebula-unuk npm...

EUVD-2025-123770

Malicious code in phoebe-fusion-soap-stop npm...

Malicious code in rocket-phoebe-phoebe-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2abb6f55dac5ef11374f9fa96c5771d9ecc7f08d9a77248e89188838c71138a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143834 Malicious code in janus-server-aurora-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2daf5864f511b2fd8658d01350244d0ae648e11c6aab4d1f206632120899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141471 Malicious code in dagda-heka-phoebe-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e78cb483a820d8e1e8684031787f848f86aacfb5b8fd42e52305de62c17bdc8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115130

Malicious code in commitlint-dependencies-upgrade-phoebe npm...

MAL-2025-146149 Malicious code in phoebe-dotenv-parse-variables-command-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ece3d0a3c92e4d2ae8824dc2f384b219324b821124e6158568921eabf59b6ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149221 Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...