MAL-2025-141936 Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-astro-axios-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 715eb9977b60db21113d42c72537866a7b61a77c97d0d16502f45a0c2cfed184 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114074

Malicious code in enceladus-rocket-centaurus-sagitta npm...

Malicious code in janus-rocket-helmet-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf25cb6683a7b566d5fac63c10dcddb44280307cb73219f67c7a9d006ff0d2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121747

Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare npm...

EUVD-2025-112283

Malicious code in janus-rocket-helmet-framework npm...

Malicious code in rocket-xanadu-nightwatch-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf13fd5923f2e7943cebd120d4e893f615243a7c95ccd364cc8967b8014252d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115710

Malicious code in capella-rocket-io-betelgeuse npm...

MAL-2025-148690 Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147472 Malicious code in rocket-koa-query-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13e9a1af132a8126638baca3a85673704533f89020924385e0120402a4b1d9bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112886

Malicious code in helios-arcturus-rocket-jovian npm...

EUVD-2025-121177

Malicious code in tool-rocket-impulse-dotenv npm...

MAL-2025-147474 Malicious code in rocket-node-sass-transport-buffer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 091155c6dabce4639e5daa79ad578fd54677999586db168e80ab5458d8580cec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145397 Malicious code in nestjs-google-websockets-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6048757c791315828cf6fd6fc888bf6104dd0e50d276b6185244daea12ef11e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116666

Malicious code in antares-rocket-server-mongoose npm...

MAL-2025-147481 Malicious code in rocket-socketio-altair-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acdf43b480a5a806a64b8c6127b929eefaf3e68aaae5dc0fefa14aa5fa3888ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148751 Malicious code in tool-rocket-impulse-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da69e02ea1de6c0283031e9f19b73ff166dcc8006bfd5f7ab0b19b6d484ba878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121238

Malicious code in titan-pegasus-transport-rocket npm...

EUVD-2025-121062

Malicious code in uglify-js-blaze-rocket-dorado npm...

Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...