MAL-2025-144239 Malicious code in lacerta-electron-taurus-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3501f859a05328b94c7db37388565d928c8afc4f855f8c268ad98bef89a627ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141770 Malicious code in dotenv-safe-postcss-loader-taurus-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 311fa8407e3f0b9e342b94b70bbf8b4f70cfd62a93df0c308b3f4b6bc8829b91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148461 Malicious code in taurus-await-ophiuchus-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 325598ed2d9b61f47852d3de88123386713e9c67d86f0f3ebaf6f8ff11aff1c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120949

Malicious code in unuk-halley-taurus-yakutsk npm...

MAL-2025-147536 Malicious code in rollup-taurus-antd-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fc7f09a8172a6f84dff3f36916e21a8732e1de7d29a1a4fa802a450bcc89c74 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111978

Malicious code in kastra-version-sagitta-taurus npm...

EUVD-2025-124229

Malicious code in npm-taurus-canopus-electron-builder npm...

MAL-2025-148470 Malicious code in taurus-kaus-server-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b7bb0fb0cdd24f0b62b321af0a5366d6e6918552563a5647bf9fa2c345e93bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148481 Malicious code in taurus-semantic-release-auth0-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db365d771623ac2eeca3feb11fa72a57fee360a9c36f83b1448c1f5b9ce4dca5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122146

Malicious code in sedna-mongoose-mdx-taurus npm...

EUVD-2025-124533

Malicious code in neptune-unuk-taurus-ganymede npm...

EUVD-2025-113228

Malicious code in geckodriver-taurus-foundation-procyon npm...

EUVD-2025-114044

Malicious code in enif-vulcan-dactyl-taurus npm...

Malicious code in sagitta-sadr-taurus-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1723df4b26e2738054b627a285a7cbbeb1598dce50f0dfc002afa5a0d00f5358 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-install-eslint-plugin-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c242bab0d2e207a9faadf024324d17dcbe6f03b5757d823bc421e6a72ee91f22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114752

Malicious code in csv-schema-alphard-taurus npm...

EUVD-2025-121464

Malicious code in taurus-castor-jasmine-chalk npm...

EUVD-2025-120703

Malicious code in vulcan-commitlint-taurus-uninstall npm...

Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...