Malicious code in jest-vortex-ini-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f57921d568b97d6d9305b1a5aa660dc2fc975b01045ac78e3fd2e0b5ed3a82d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-norma-spawn-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d9871526da17ffbeb1990534998c1ea3e9b0812ae4bbd2867c1b095eabba085 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149184 Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147461 Malicious code in rimraf-vortex-nashira-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e38ac0ee46954d7b993079acbf423ca421753c5b7c1f34ee247e3328be09c172 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vortex-loglevel-deimos-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269a15bdf3c8662d095749c92ca6e42d874ed013fb01d41651bb4bba8068a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149187 Malicious code in vortex-phenomic-schema-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb5d533291b2ed88674d84856e3b9d0ddf9b1420895789b87beb95ea87124916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-leda-mongodb-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdbe5ec481357f98d1df3769ba55b71340587a839440bd8eb579dcbdf91f8296 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in event-proxima-webdriver-mocha-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11534f986c769a549d28a9789876bdef3b468105ec0b90b7b0761a0e8c11c1a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144762 Malicious code in mdx-comet-vortex-karma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d646738d6d0dbaf2fb6006965a6ceaef683ecce9f15d049302831323556e933d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111442

Malicious code in magellan-vortex-update-ganymede npm...

EUVD-2025-113789

Malicious code in event-proxima-webdriver-mocha-vortex npm...

EUVD-2025-122435

Malicious code in rocket-yaml-vortex-rollup-plugin npm...

Malicious code in titan-dotenv-rigel-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec9d37486aa9438dc0b0d6ae2a1673e01db0f52d873ffe40f89882c658970cb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spinner-venus-izar-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22743ffdcb88a3ad3f6bc32150254dadfa3f45695c7f11d0e9a16ea3ac1d126 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-ariel-zenobia-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15bff887919eed00708f4bd099ec6d4bc2bbaaca712b700c892b5cd91641d159 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143107 Malicious code in grus-vortex-astro-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f61e3280e1988ae1427e0687e09494aef1d2eb0292075f75ddbd7458039d8d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140867 Malicious code in colors-vortex-phoebe-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df9cf3eb42d2f5ed6e088a87e33540bc56bfed7f1f9ded003fbecbd6a1cc13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...