EUVD-2025-122146

Malicious code in sedna-mongoose-mdx-taurus npm...

Malicious code in axios-taurus-dependencies-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 965c88890449fe70ebace8f5d70434f7e73124448645e16a637c60e57170d328 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148980 Malicious code in unuk-halley-taurus-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a942ec4a2265c2589403d73c31d92b7972afc5a0720c36e2cdbfbd3b746274ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121453

Malicious code in taurus-package-bellatrix-loglevel npm...

EUVD-2025-121452

Malicious code in taurus-phenomic-forever-loglevel npm...

EUVD-2025-116680

Malicious code in antares-mysql-gacrux-taurus npm...

Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-auth-bunyan-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c28eada95a2466abcf6454f804708ecb9d74a085996376d2b7ffcb5ca0835786 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-zenith-slides-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01309bcfdd69dd813ad7fd9065b671bf36401dbacfe9b942e780008bb7b800d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139422 Malicious code in antares-mysql-gacrux-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edba824e6fe768f08d584a55a0dd42859273e51438ddde244b1179c175b38396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-transform-taurus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f0909ba4909733d4fac4e56663f46711f68ddc92b68de6f9e53ac2818f36279 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114752

Malicious code in csv-schema-alphard-taurus npm...

EUVD-2025-111493

Malicious code in magellan-astro-taurus-slides npm...

EUVD-2025-122556

Malicious code in rest-slidev-taurus-algol npm...

Malicious code in ursa-virgo-less-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c42a0a6b7d9a44c8952af3e3dbb40af74f2ceedec34b367f51a806d743e9bc64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148460 Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-deneb-hyperion-selenium (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 272cd4b9d4ac9f5f74e53ef7dc88df2918c406718307d5e5c981031ab4e14c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143449 Malicious code in hydra-pavo-taurus-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15061f0cc0e121caaff0c51e817e1426d95c40b7d140db63c1f74c738cea90d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148479 Malicious code in taurus-repository-scorpius-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dd0eef2dc8375f15ed1284e0fc760f7af5017e3c26b9425fef93b6c483214e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...