Malicious code in taurus-lint-andromeda-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22aede6c54725dc663745ea8702cae95b5545630e7dc96af364471615c2b017c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121888

Malicious code in soap-taurus-alphard-await npm...

Malicious code in sedna-mongoose-mdx-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f685c7f1a1ccbaf9d2854a73087c26e670062432dfb5c8300287384444aca577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-kaus-server-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7bb0fb0cdd24f0b62b321af0a5366d6e6918552563a5647bf9fa2c345e93bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120830

Malicious code in vega-supervisor-exec-taurus npm...

EUVD-2025-115631

Malicious code in cassini-taurus-init-eris npm...

EUVD-2025-111518

Malicious code in lynx-node-sass-rocket-taurus npm...

EUVD-2025-121442

Malicious code in taurus-zenith-slides-betelgeuse npm...

EUVD-2025-123104

Malicious code in publish-taurus-css-loader-mensa npm...

EUVD-2025-121448

Malicious code in taurus-rocket-tailwindcss-antares npm...

Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kastra-version-sagitta-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb3ad7629526512c8e8094dc1e6a642a0a45b7f8f0b9d35bcec3a523d57cc4a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120949

Malicious code in unuk-halley-taurus-yakutsk npm...

Malicious code in taurus-release-it-sadr-mui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4ff411da84f3751381a5af5ff44c207ce3708e666554d56c0838d8ba1d25764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-xerxes-hermes-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d62dd69842d1de8de9279530ed1672edbb1df83677fcfaeb9d7d4d1f68c79d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111978

Malicious code in kastra-version-sagitta-taurus npm...

MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144239 Malicious code in lacerta-electron-taurus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148474 Malicious code in taurus-module-style-loader-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f6f458ad29f3855a38854e4aee7cb2e60dbad295cb3fa1b3daef65ccb8840a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...