Malicious code in rest-izar-jest-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80bca4ad83dc46cdec9d6f957011f569c0fcfb8768ffccf992d588bd78d8c670 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116100

Malicious code in betelgeuse-rest-zenobia-chalk npm...

Malicious code in rest-quito-betelgeuse-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3da8ce47e39a6fcb94ed9b5ea924b2b60ce702cb02686594e96bcc4d7a7a669b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122581

Malicious code in rest-centauri-remark-express npm...

EUVD-2025-123854

Malicious code in perseus-ariel-andromeda-rest npm...

EUVD-2025-112697

Malicious code in husky-element-ui-rest-eris npm...

EUVD-2025-122551

Malicious code in rest-xml-oberon-eslint npm...

Malicious code in rest-adonis-framework-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abdc97d6ec3057d62c70412d4694f39667435d58eb89479f96832d7ed4b1b46d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-arcturus-io-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d0b8686eed7092e318656016dd7a3307ce443b16ea6fab1ef179d685a0e7e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124344

Malicious code in nodejs-relay-rest-deneb npm...

EUVD-2025-122084

Malicious code in semantic-release-update-kronos-rest npm...

Malicious code in bellatrix-rest-blitz-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92d051a410ec4e152e8429393d4f69c4e39cb62b3f53704d5f7a54d4a087b454 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-wasat-standard-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139657 Malicious code in atlas-rest-quantum-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9902762b166cf43320d02a48cffdb04c5ee77d718482f98ae39137072d974b53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111531

Malicious code in luna-start-prettier-stylelint-rest npm...

EUVD-2025-115098

Malicious code in concurrently-public-rest-capella npm...

MAL-2025-147357 Malicious code in rest-nebula-apollo-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-fusion-altair-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f094ba9baa49f34d1f0414a382a467ee52bf655487152b52bfbc124b6c8b5cde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147364 Malicious code in rest-rimraf-auth0-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 308cc6969d5c0fd9d5fb4f300fda62ca7b42b335cd50278fad17ece90c2621cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...