Malicious code in rehype-spinner-wasat-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3c2c259413755d91ab2d7887a4bad3620fb777e89d8391c8ead79364d62b8b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wasat-terser-sirius-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56799176c6615904f4c2fa7cf443e635efe39e0b174d0f4a167414ada64497d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113322

Malicious code in galaxy-karma-restart-wasat npm...

Malicious code in test-callback-airbnb-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131803de6486f41f40a8396879555f59e02c4c4848ab5135eea1aeaa79c94ee9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114574

Malicious code in deneb-callback-terser-wasat npm...

EUVD-2025-120628

Malicious code in wasat-sadr-iota-cross-env npm...

EUVD-2025-124070

Malicious code in ophiuchus-wasat-winston-levels npm...

MAL-2025-146953 Malicious code in quasar-jest-wasat-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46ff76c6d38f816d4a403227d263b7b7b6524b10f5c705c9399882aa83327298 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139593 Malicious code in ariel-ora-farout-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2499e2c6d1cc3c2e72747a240235163a36b37210b6a5635bc43e1476a8dc32ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120639

Malicious code in wasat-forever-frontend-reveal-md npm...

EUVD-2025-113501

Malicious code in fornax-chakra-ui-wasat-xml npm...

EUVD-2025-120637

Malicious code in wasat-jabbah-nodemon-spawn npm...

MAL-2025-140975 Malicious code in commitlint-config-angular-webpack-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b38732bb40f27e5ef5078f17e319f036a03a4a5baf07946c9d5ae86538d5462 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149302 Malicious code in wasat-scripts-ariel-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 820a675b2d5c57372b0369552e6b26d05b6da7a6a724eceda1fb154d9518b211 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144043 Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115447

Malicious code in chalk-wasat-juno-materialize npm...

EUVD-2025-120635

Malicious code in wasat-mdx-rate-limiter-commitizen npm...

EUVD-2025-123015

Malicious code in quantum-loopback-element-ui-wasat npm...

Malicious code in rest-wasat-standard-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570e7bdadc36f85812f4103f7b3cbbfe742df9bddb1406e6bbccc939b7e62d94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...