Malicious code in andromeda-xenos-relay-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0e5979a37668f23e180bde79ead45f1bedefb653cbdb6a846c2c4d8a99c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bellatrix-polaris-resolvers-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 83cf514d7bef98542ee626677316d7a5026986b8fefbba0f83799577b78ac3dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-120259

Malicious code in xenon-xenos-sadr-dotenv-parse-variables npm...

EUVD-2025-111221

Malicious code in metalsmith-xenos-spica-elara npm...

EUVD-2025-115976

Malicious code in browserify-aldebaran-xenos-titan npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

Malicious code in yaml-aquarius-xenos-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877cdd5782a7ccd2ad4094b243a61df1ee126983b9a2415a077d58e1353944f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113080

Malicious code in gravity-xenos-postgres-concurrently npm...

Malicious code in mysql-kinetic-xenos-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054698a44ce91b0b7fe53abd054c720e6d4f9043f3a13653cf4a9c0f1afe346a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120254

Malicious code in xenos-fusion-terser-transform npm...

Malicious code in xenos-fusion-terser-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9e52675c558394ae57cdd87ab9345caba594dbcea1608a9bff66bc6ab90bd4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112501

Malicious code in ini-xenos-stream-webdriverio npm...

EUVD-2025-121119

Malicious code in triton-changelog-xenos-chakra-ui npm...

EUVD-2025-113979

Malicious code in equinox-playwright-xenos-solis npm...

MAL-2025-140128 Malicious code in browserify-aldebaran-xenos-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f277a8e2043125ef61eea10470609ab461aea2f94e9fe3ca7c9b106662eb3254 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149673 Malicious code in xenos-airbnb-quito-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d69b73f1b84b812f228d10db72c89f610a6d993790e55508b9dfa9e24ee52e9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145796 Malicious code in odin-janus-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384e902e971c3bf77f1e3356c7b21237e48b31e6707cb7d609e0efa6b0fef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149680 Malicious code in xenos-halley-nextjs-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea90a89f7e2f9754822f85568e845254ae760b8796313aa877aac600d48ae5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148864 Malicious code in typeorm-xenos-hermes-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1bd8e8455465ccb136581cc210a5f1565770cf672f43b994f6e8b31c06e57a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...