EUVD-2025-120142

Malicious code in yaml-foundation-antares-zenith npm...

EUVD-2025-120753

Malicious code in virgo-zenith-restart-link npm...

EUVD-2025-122460

Malicious code in rocket-astro-cli-zenith npm...

EUVD-2025-121517

Malicious code in supervisor-zenith-ganymede-blitz npm...

EUVD-2025-115787

Malicious code in callback-transform-zenith-node-config npm...

EUVD-2025-120070

Malicious code in zenith-xenon-nashira-ultra npm...

EUVD-2025-123656

Malicious code in pipe-phenomic-zenith-dotenv-safe npm...

Malicious code in express-zenith-scorpius-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10bf26b83820e3ea84a77eedc896b9b3c0544dad71d182443b1f639e26f8c2e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120514

Malicious code in webpack-zenith-winston-changelog npm...

EUVD-2025-121883

Malicious code in soap-zenith-commitlint-airbnb npm...

EUVD-2025-123468

Malicious code in postgres-zenith-gatsby-reveal-md npm...

MAL-2025-149853 Malicious code in zenith-iota-sedna-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0951cf7f9333702afff9bb26db65d093a3a169d26b74598e2e501bcd246b7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148644 Malicious code in thuban-capella-zenith-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027ed59366331190f73add52d5b05344f8b8e2a2c52ef19ff434fa7fedf00cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139600 Malicious code in ariel-zenith-farout-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef2ec87771dfd6bbcceb4e5551bab71eb5acb0ee62571d0b97eb9ffd3c9e8e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149015 Malicious code in upgrade-helmet-zenith-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 029323854f25d0b890fc15cdfed960fa871990c4eeb799297344b79d60c6b465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144683 Malicious code in markdown-loopback-ursa-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57f1714b1cf67d20164beb37d9861a8cb15671e68dc261c9e0b7405341022519 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149850 Malicious code in zenith-fornax-nodemon-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c233eed913a5955494e36e35b177d30b7e2e149fb6783776be8bba88cdb4ceed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142214 Malicious code in eslint-configstore-transform-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96b2652a5d2256805c259c8f94e1244bdb3de2f2d085378bebf0f43237998140 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144523 Malicious code in loglevel-xenos-child-process-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89afd7046dc02e65e205937635f26c7474c3f5c9ba7e19863cb1fcd4455e0cd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140429 Malicious code in carpo-antd-less-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd06c1c23d3f2cb03e4cf07ea26ad3cd85f7354f359c74d530248a1ed7cce40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...