MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145796 Malicious code in odin-janus-procyon-xenos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384e902e971c3bf77f1e3356c7b21237e48b31e6707cb7d609e0efa6b0fef53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139221 Malicious code in adonis-xenos-got-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e262eb227d33e53762a9bdaf1b929da6e755daf1cc149ce09ba24785fb8e7934 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144524 Malicious code in loglevel-xenos-norma-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aeb2344b956fa9c662f301c31ca881fe491b0221853b2e0871fcd45a7167bf4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144588 Malicious code in luna-xenos-relay-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c975620d825a283af00eabd79645d08b0c38867f081c7fdc2039d5129aebced0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143032 Malicious code in gravity-xenos-postgres-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cc50e6689771dd7021790880d27ee8c24b1425bb75d7acd7ba4a3bd17331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenos-weywot-yonder-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 459589f2935fbcead2d7f29e5333332fd8f5e7a26cb0459b689682edf05048f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-xenos-ariel-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbbf5ed0ca944dbebe9f864a0a6b60b91513f5117780f132dc0a0986272aff05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116715

Malicious code in andromeda-xenos-relay-npm npm...

EUVD-2025-123398

Malicious code in prettier-stylelint-winston-xenos-capella npm...

MAL-2025-143025 Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 569720695da2349549e200d3557858a4c5638b7ab11fa2c1782e3b7fc1ce2bf6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-xenos-lint-staged-dotenv (npm)

The package husky-xenos-lint-staged-dotenv was found to contain malicious code...

MAL-2025-43431 Malicious code in algol-koa-xenos-redis (npm)

The package algol-koa-xenos-redis was found to contain malicious code...

MAL-2025-44518 Malicious code in halley-chariklo-rollup-plugin-xenos (npm)

The package halley-chariklo-rollup-plugin-xenos was found to contain malicious code...

MAL-2025-44647 Malicious code in hugo-xenos-soap-deneb (npm)

The package hugo-xenos-soap-deneb was found to contain malicious code...

Malicious code in halley-chariklo-rollup-plugin-xenos (npm)

The package halley-chariklo-rollup-plugin-xenos was found to contain malicious code...

Malicious code in module-xenos-install-oauth (npm)

The package module-xenos-install-oauth was found to contain malicious code...

MAL-2025-44351 Malicious code in galaxy-nucleosynthesis-lithosphere-xenos (npm)

The package galaxy-nucleosynthesis-lithosphere-xenos was found to contain malicious code...