EUVD-2025-122098

Malicious code in semantic-release-fornax-xerxes-command npm...

Malicious code in izar-transport-transport-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 618328e12b0ff637ceb1688683a924234b65fbda44e8fcb3c6a3ad3647166f7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-xerxes-changelog-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0175d3df92c5f5ea2098b26de86bbb5dfcd75cad02a6e06b6ef549a7591cfcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-mdx-xerxes-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd044204a95843e7083af4777aecd655a9d9ac6d2120c78c235ae0164b0c172c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142300 Malicious code in europa-webdriverio-chromedriver-xerxes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9261fa6b5e81737cb2fb47ace42efa2824f828b3c51aa7a92dc69a8f409c5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149708 Malicious code in xerxes-jsonp-castor-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146452 Malicious code in postgres-xerxes-changelog-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0175d3df92c5f5ea2098b26de86bbb5dfcd75cad02a6e06b6ef549a7591cfcbc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141988 Malicious code in element-ui-xerxes-elara-eris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a16e8c3b0a75e3d1b6080c8124bc4f5c0c3de6d2e192c28a952d63dcbdc89aed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149717 Malicious code in xerxes-repository-transform-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084a137d2be3db55a1f0664186668da911432bc4f0ec5e2a3c84ef7f34d9bb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149174 Malicious code in virgo-xerxes-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69951ea3063a19a4b6fdf535ce96895993a9bbc7b93ad9729bec801aa77fc0c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123008

Malicious code in quantum-regulus-xerxes-iota npm...

EUVD-2025-123170

Malicious code in proxima-xerxes-phoenix-adonis npm...

EUVD-2025-111642

Malicious code in lint-staged-xerxes-repository-metalsmith npm...

EUVD-2025-123139

Malicious code in publish-ganymede-cosmiconfig-xerxes npm...

EUVD-2025-113362

Malicious code in fusion-xerxes-comet-auth npm...

Malicious code in xerxes-public-eslint-plugin-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd2d15fdd3e3f0c5477368f312b0532431a264e618e809ebbdf7474e454016b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123678

Malicious code in pino-pretty-rate-limiter-xerxes-flare npm...

EUVD-2025-120219

Malicious code in xerxes-ora-neptune-dotenv npm...

Malicious code in xerxes-jsonp-castor-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7f28f765c1785c39f9704828b05faed52ece79ce41a3e4c2bc9657f50b062d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-weywot-eris-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 009132446e6de1cf47b905af2f0ffc0bcef9821a4af74b0725341515abc2680d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...