MAL-2025-189057 Malicious code in radiant-nestjs-parcel-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e61d794783712ae79ac94f129279432d13a6897e7dd8913533fbd9b8ad83290b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189060 Malicious code in radiant-toml-primatology-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26e736c0f15dac33a2a045f08b15563499e027f9774ffeffc83ca24ee39b69a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116372

Malicious code in auth-radiant-kastra-standard npm...

Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122905

Malicious code in radiant-nightmare-xo-browserify npm...

EUVD-2025-111523

Malicious code in lynx-element-ui-radiant-altair npm...

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c3a485ba71bf8141e3c611d37b28d38f948007f335340e0dd9e887ec7be1298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124053

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...

Malicious code in radiant-spica-aquarius-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7169f32b6920c67feca4879bb9c15b8431f75f889719ff5864c3908dc64c8ad5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116769

Malicious code in alphard-odin-radiant-hapi npm...

EUVD-2025-121748

Malicious code in spica-radiant-await-docusaurus npm...

EUVD-2025-112498

Malicious code in init-bootes-radiant-aether npm...

EUVD-2025-123060

Malicious code in puppeteer-radiant-proxima-build npm...

EUVD-2025-111724

Malicious code in library-slidev-test-radiant npm...

EUVD-2025-121006

Malicious code in umbra-meissa-yaml-radiant npm...

EUVD-2025-122900

Malicious code in radiant-publish-triton-xanthus npm...

EUVD-2025-120998

Malicious code in umbra-optimize-css-assets-webpack-plugin-radiant-publish npm...

EUVD-2025-122906

Malicious code in radiant-mira-cypress-callback npm...

EUVD-2025-122903

Malicious code in radiant-polaris-oberon-prompts npm...

Malicious code in radiant-spinner-prompts-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 672b586fc704e80537020f4425ed8b4ba982e4a9c98f2cd2c6bc5572b9bd1e98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...