Malicious code in vortex-pino-pretty-gacrux-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ac5f7ea82874ddd50989e85c63def24eb8c9cd48b756f20d19912ecea3f5bf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114438

Malicious code in docusaurus-optimize-css-assets-webpack-plugin-vortex-json npm...

EUVD-2025-120747

Malicious code in vortex-halley-envconfig-sagitta npm...

EUVD-2025-113389

Malicious code in fusion-barnard-vortex-tool npm...

EUVD-2025-120743

Malicious code in vortex-octans-adonis-sirius npm...

Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121711

Malicious code in spinner-venus-izar-vortex npm...

MAL-2025-139572 Malicious code in arcturus-loopback-typeorm-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10e2ce882a35af2827440b2150e881268e7afeb8bb1936417cdfd796f7f5ab4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113789

Malicious code in event-proxima-webdriver-mocha-vortex npm...

EUVD-2025-111442

Malicious code in magellan-vortex-update-ganymede npm...

MAL-2025-147487 Malicious code in rocket-yaml-vortex-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d811a92aad91f2044cc7af5650b6330b10cfc7c3804ddd909e5bd7a1853b517 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149615 Malicious code in xanadu-vortex-commitlint-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56d64f87e6cce76f6ff4efed0deb7484278a6ba8041ff40ef0ff4b4e35deb5ec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116134

Malicious code in betelgeuse-betelgeuse-carpo-vortex npm...

EUVD-2025-113005

Malicious code in grus-vortex-astro-sedna npm...

Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in firebase-eleventy-protractor-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0798504104232bd981669802bf8d352aef1ac84de841bfc470416a94c4a6512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in colors-vortex-phoebe-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df9cf3eb42d2f5ed6e088a87e33540bc56bfed7f1f9ded003fbecbd6a1cc13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120398

Malicious code in winston-vortex-prettier-neptune npm...

Malicious Package

Overview vortex-logger is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...