Malicious code in pulsar-dotenv-safe-redis-fermiparadox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c008e0e78c252ad80dc2cdf02ef146655bf01aa8cc20e278fc2892651e7ded This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179085

Malicious code in equinox-kastra-pulsar-avior npm...

EUVD-2025-176899

Malicious code in pulsar-run-script-process-io npm...

EUVD-2025-179512

Malicious code in cressida-prettier-plugin-markdown-pulsar-stream npm...

EUVD-2025-176904

Malicious code in pulsar-interferometry-singularitarianism-husky npm...

EUVD-2025-176901

Malicious code in pulsar-phoebe-apex-iota npm...

EUVD-2025-176908

Malicious code in pulsar-crust-acamar-technosignature npm...

EUVD-2025-176583

Malicious code in run-script-sagitta-pulsar-alphard npm...

EUVD-2025-176902

Malicious code in pulsar-orogeny-heliophysics-morgan npm...

EUVD-2025-176906

Malicious code in pulsar-exoplanetology-archaeoastronomy-repository npm...

EUVD-2025-177311

Malicious code in parsec-pulsar-areology-airbnb npm...

EUVD-2025-176163

Malicious code in subduction-pulsar-yaml-janus npm...

MAL-2025-185892 Malicious code in bootstrap-semantic-release-pulsar-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6105ade3946c0a9b9a29cac5be3458e9ab96773616c0e664047e26dcd915a13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188977 Malicious code in pulsar-selenium-oortcloud-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b9c392f64679172f81a2fc6e79ccf979dfbf3879ed0696eb339f8e1a4219167 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185807 Malicious code in biogeochemistry-carpo-alphard-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb6ae68492781c51e2028c436dc6451385234e8dcd5c0047bca8aba4e03c5e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189989 Malicious code in transport-ursa-spinner-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5af491f95d646d3d4421bbe34372859a3bc57e2f6d476a3d03eda099aaecb9ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190372 Malicious code in xenon-graviton-gravity-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa5cd3c1a720ee5addd563d7161ef6e801e83409e8f804fd7355ef0ddb38c2fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187975 Malicious code in meissa-polaris-pulsar-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55be14a3895b75568b753b0dbb7e610f2c1ea7657cf1dbb55f0d70db002b25a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186478 Malicious code in darkenergy-config-pulsar-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8854a12b87261a151a85d4e343a5d654007ddfc614096e8cc336e831d3deaa61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188973 Malicious code in pulsar-orogeny-heliophysics-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 333e8662dad6f87568ddf49c98f9b0c3a7a9631721d35321a5287cb062713e76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...