MAL-2025-141980 Malicious code in element-ui-proxima-sync-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96d1516a39fae6f5fa9467f1039259512b48cab124ba4540daba287523350a7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140237 Malicious code in bunyan-aether-proxima-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bb43fd0e0a07bae180db3beb2fa29cca2e04708e2d3ceb38f7d9324663803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149165 Malicious code in virgo-proxima-markdown-pdf-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f219bc0b48937bf3537bcbb91d9f436e7399d6db994afe3b12ca393ab705e1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143981 Malicious code in json-proxima-tailwindcss-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb74997a4a6c88093ebe105687a6d4d7790592f71e1bb9ef948236906dcee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148061 Malicious code in socketio-proxima-ini-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd4c1cf784a1fcbcb51944404e2cc1777fc3110d3790e3495c63929c933166f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141036 Malicious code in config-proxima-duplex-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd0d5e9cb5983b4c6c0b159ad8e6bd1605cfbb77d5568ccef57bc450516295bb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140977 Malicious code in commitlint-dependencies-loopback-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0aef012a555af886c0bacf11d142271509bea1aa08ebcf5f1b0cc1c4e895b26d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146597 Malicious code in procyon-iota-mui-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fc2ced325bdb2030777324a99f250c38cbc9d416a4c685826d71101a55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142573 Malicious code in forever-proxima-node-config-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b732624153fce00320a627aa1ffdc3de2a3f8f88263b9a60c079022a0f486d80 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146743 Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112302

Malicious code in janus-gravity-npm-proxima npm...

EUVD-2025-113789

Malicious code in event-proxima-webdriver-mocha-vortex npm...

EUVD-2025-122527

Malicious code in restart-registry-proxima-hexo npm...

EUVD-2025-122530

Malicious code in restart-proxima-apex-despina npm...

MAL-2025-141840 Malicious code in dynamo-spectron-proxima-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2003-0289

Malware in sbrugna...

Malicious code in transport-nodemon-proxima-colors (npm)

The package transport-nodemon-proxima-colors was found to contain malicious code...

Malicious code in commitlint-pm2-proxima-dotenv-safe (npm)

The package commitlint-pm2-proxima-dotenv-safe was found to contain malicious code...