EUVD-2025-112708

Malicious code in hugo-tethys-mini-css-extract-plugin-ceres npm...

EUVD-2025-120400

Malicious code in winston-tethys-epimetheus-enif npm...

Malicious code in tethys-nova-changelog-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91cd76444f1127ad2a02cdb347e60a363ca07cf1a9ab39ddef4716deb7014a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quark-sass-loader-tethys-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 116c1347633b8d82c9e598f6bbd05698b5712a0a16af782398747926b03a2c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115973

Malicious code in browserify-less-loader-tethys-style-loader npm...

EUVD-2025-121017

Malicious code in ultra-terser-capella-tethys npm...

EUVD-2025-122985

Malicious code in quark-sass-loader-tethys-css-loader npm...

EUVD-2025-121315

Malicious code in tethys-commitlint-galaxy-bellatrix npm...

EUVD-2025-121303

Malicious code in tethys-non-blocking-hexo-spinner npm...

Malicious code in celeste-juno-restart-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e323730ed431ba0402402ddebb72abbf45522ea92c6910ada2bf7ebe2a01509 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114942

Malicious code in corvus-tethys-elektra-less-loader npm...

MAL-2025-144089 Malicious code in jwt-tethys-eleventy-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 566ab5195a913e703f2510e429b5fde782181dae4b9be1302041922eef69bd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-helmet-markdownlint-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7dd146f8b14178ac1a675fc49a5c08c881775ce18fd6b985c364ac18b26bbb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tethys-gulp-bootstrap-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a91010575aafc5a357f617818a3e5202f494f84ef43eb7f26c7cab7739f7235e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148623 Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140031 Malicious code in blaze-request-xml-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ffd5543df0e4db9f532f3624ab9714d84734558324dc27ad9121b17db8a5f24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121291

Malicious code in tethys-xenon-husky-celeste npm...

MAL-2025-148631 Malicious code in tethys-proxima-json-wolf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a301dbb38dbba0dc9d86979bafe275a257767e80e26a0d116fa2ac261095b671 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...