EUVD-2025-120078

Malicious code in zenith-lint-local-google npm...

EUVD-2025-115880

Malicious code in bulma-phoebe-zenith-weywot npm...

EUVD-2025-115558

Malicious code in centaurus-publish-zenith-transport npm...

EUVD-2025-111228

Malicious code in metalsmith-polaris-browserify-zenith npm...

Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115368

Malicious code in charon-wasat-octans-zenith npm...

EUVD-2025-121060

Malicious code in uglify-js-chalk-spica-zenith npm...

EUVD-2025-122335

Malicious code in sagitta-child-process-zenith-fork npm...

EUVD-2025-120079

Malicious code in zenith-iota-sedna-non-blocking npm...

MAL-2025-149860 Malicious code in zenith-selenium-library-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79a5397d1d1c661e3a6500425713dc90e749fb26cffa81cbe95d446a18798b1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146848 Malicious code in pulsar-zenith-triton-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2308c0086857e94cb94b05a3c706f8f73f30ad6f37c3b5774f0cf69efe612da3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124067

Malicious code in ophiuchus-zenith-superagent-publish npm...

MAL-2025-149847 Malicious code in zenith-elara-proxima-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c41d9ad00ce10402bcb84d375b9c2b0e19568cae242110fe27e150e1252f2682 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140716 Malicious code in chariklo-zenith-proxima-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4d16309eec2c4b68c617d8e3add8ee19c0b69ec68801ac360a1206f5773a74d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149849 Malicious code in zenith-fomalhaut-acamar-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af716b0b5818b706cffdcbca9de8242d2f29ede404e69bfeea745ef34db684fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120082

Malicious code in zenith-fornax-nodemon-blitz npm...

EUVD-2025-116034

Malicious code in blitz-zenith-flare-hapi npm...

MAL-2025-149861 Malicious code in zenith-tailwindcss-helmet-carina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ac99628cc463df34bb5966523d40dedafbd2d76d2036558ffc840d3397455e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145697 Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a6ecc1a14fe73fd1f18d7af8d2227d2606a853eea7f5cf745f62ef227ed6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...