EUVD-2025-123183

Malicious code in proxima-sirius-sirius-jwt npm...

EUVD-2025-123204

Malicious code in proxima-hermes-ganymede-selenium npm...

MAL-2025-148061 Malicious code in socketio-proxima-ini-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd4c1cf784a1fcbcb51944404e2cc1777fc3110d3790e3495c63929c933166f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139542 Malicious code in aquarius-npm-telesto-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174f9d45048e76b74c948f8ccdbeb1b6b43140eec93b9e82678d65ae6322ef55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146597 Malicious code in procyon-iota-mui-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e4fc2ced325bdb2030777324a99f250c38cbc9d416a4c685826d71101a55525 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123190

Malicious code in proxima-proxima-relay-style-loader npm...

MAL-2025-142882 Malicious code in geckodriver-redis-proxima-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69763f048926b7967ad891146ec8e1b3a4dbf64f30fd699cbe99dd1ed7521bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146738 Malicious code in proxima-shelljs-rate-limiter-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3dc1868def93642482dc1cde7445a3203c79d579a7682f4e895658766993e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143981 Malicious code in json-proxima-tailwindcss-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fb74997a4a6c88093ebe105687a6d4d7790592f71e1bb9ef948236906dcee08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140716 Malicious code in chariklo-zenith-proxima-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140237 Malicious code in bunyan-aether-proxima-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bb43fd0e0a07bae180db3beb2fa29cca2e04708e2d3ceb38f7d9324663803e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124694

Malicious code in mutation-ganymede-proxima-eslint npm...

MAL-2025-146745 Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 748d8b8f64af29685a4cf4a2b52fcbb9c4ab81bedee9b428c9ebbc145e83538d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149857 Malicious code in zenith-npm-kaus-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28b8caf1c1af4b970fe30f56c9e9ebc3ad4a856d8311c24ea3cf0b79665e685c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141840 Malicious code in dynamo-spectron-proxima-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01a131a162085ca31baa40fc2176a41a7f97bf253d7f5f8400d421f53e5d52a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2003-0289

Malware in sbrugna...

Malicious code in proxima-bunyan-got-morgan (npm)

The package proxima-bunyan-got-morgan was found to contain malicious code...

Malicious code in configstore-oberon-proxima-duplex (npm)

The package configstore-oberon-proxima-duplex was found to contain malicious code...