EUVD-2025-120752

Malicious code in virgo-zenith-rocket-envconfig npm...

Malicious code in rocket-bellatrix-slides-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27c31597941ce5a566db60d7d472f7a2811fd08f8476dbb11b9074b61a8d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111218

Malicious code in metalsmith-yildun-rocket-install npm...

EUVD-2025-111362

Malicious code in materialize-rocket-standard-nestjs npm...

Malicious code in rocket-phoebe-norma-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b96ee1261f193a70b7eb7bb78cefd12edeee6d534a331c98854f83aeddd3e8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122444

Malicious code in rocket-rocket-rate-limiter-gravity npm...

EUVD-2025-114049

Malicious code in enif-rocket-despina-phoebe npm...

EUVD-2025-121062

Malicious code in uglify-js-blaze-rocket-dorado npm...

EUVD-2025-122849

Malicious code in react-bootstrap-rocket-async-meteor npm...

EUVD-2025-114174

Malicious code in elektra-aether-rocket-thuban npm...

EUVD-2025-122443

Malicious code in rocket-semantic-release-spectron-polaris npm...

EUVD-2025-122587

Malicious code in resolvers-scorpius-react-bootstrap-rocket npm...

EUVD-2025-115587

Malicious code in celeste-remark-readable-rocket npm...

MAL-2025-144753 Malicious code in materialize-rocket-standard-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0709cf7247b61cb50046c0d471edd39a3f667382a74aa4aa13b18ee742f99d84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142061 Malicious code in enif-rocket-despina-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf55b6c4449d96986c74fe612839facffe21b787d457d641c848b520ebc402b0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147480 Malicious code in rocket-server-repository-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d9a2f1cc9e19f3853a00c6425d9caededd5e2036c1d89d881d3241dd19d9160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147478 Malicious code in rocket-rocket-rate-limiter-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41e26082c9b904ba1de4516401a9a993d4862884ee2c98d0d8c7caf5a1f51ca2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147073 Malicious code in react-bootstrap-rocket-async-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6eed4998bf00e59d674933b76fbf9a1a5c4a158d6c5f0892cc4c658ac9d96f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148480 Malicious code in taurus-rocket-tailwindcss-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37e807b35ff747380871af9c1a0c9c793ec19b44283a142ca5794a2dc3a8219c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...