EUVD-2025-123625

Malicious code in pm2-draco-pulsar-yildun npm...

MAL-2025-142715 Malicious code in frontend-pulsar-nuxtjs-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6273018e032c98dfefa980044a8e70889caebc56332360a580aac8f43fcb2ce5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146826 Malicious code in pulsar-astro-backend-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d277a175b4a65c1eeea5e6256ad1133633eeda9595eba61ab39084720699e6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139338 Malicious code in alphard-pulsar-umbriel-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a403cde30f3b89e6bdab6ed0efd2615e48746d0458d5f5ccac299ba6ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123251

Malicious code in prompts-nashira-pulsar-jekyll npm...

EUVD-2025-116085

Malicious code in blaze-antd-halley-pulsar npm...

Malicious code in upgrade-prettier-plugin-markdown-capella-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ed6d0ba1d862841f5a8bef326ce13d517ba36801ff1fa33fc2b104643f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114151

Malicious code in element-ui-aquarius-pulsar-readable npm...

EUVD-2025-123075

Malicious code in pulsar-xml-nextjs-eleventy npm...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

EUVD-2025-124848

Malicious code in mocha-chariklo-callback-pulsar npm...

EUVD-2025-123091

Malicious code in pulsar-farout-pegasus-publish npm...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

EUVD-2025-111975

Malicious code in kaus-cassini-pulsar-tool npm...

EUVD-2025-124459

Malicious code in nightwatch-cz-conventional-changelog-pulsar-supervisor npm...

EUVD-2025-111594

Malicious code in loglevel-telesto-pino-pulsar npm...

Malicious code in radiant-vuetify-pulsar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146847 Malicious code in pulsar-xml-nextjs-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0199654cd2a544402f7fa4493d46c06e17e6e76ea2056d0a17ae90f068059f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146849 Malicious code in pulsar-zenobia-sirius-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66f5376b0c0e0a0ff01dd8e01c3bab10543dba3f4dce47a2a2aa1524795a648b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146845 Malicious code in pulsar-terser-publish-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3720a288da20adf950ef63d4d9940f4c6c2306532eaf5161886362bcc34b0f16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...