EUVD-2025-116726

Malicious code in andromeda-dagda-mui-xenon npm...

EUVD-2025-122307

Malicious code in sagitta-registry-andromeda-postcss npm...

EUVD-2025-115144

Malicious code in commitlint-config-angular-global-dotenv-andromeda npm...

EUVD-2025-123783

Malicious code in phenomic-spectron-webdriver-sqlite-andromeda npm...

EUVD-2025-122018

Malicious code in server-sagitta-andromeda-centaurus npm...

EUVD-2025-113762

Malicious code in exec-koa-andromeda-google npm...

EUVD-2025-122235

Malicious code in schema-andromeda-typeorm-link npm...

EUVD-2025-124772

Malicious code in mongoose-andromeda-janus-chai npm...

EUVD-2025-115128

Malicious code in commitlint-equinox-antares-andromeda npm...

EUVD-2025-116201

Malicious code in barnard-andromeda-indus-magellan npm...

EUVD-2025-113746

Malicious code in express-andromeda-xml-miranda npm...

EUVD-2025-121578

Malicious code in subscription-andromeda-leda-antares npm...

EUVD-2025-116721

Malicious code in andromeda-phoebe-cressida-flare npm...

EUVD-2025-113355

Malicious code in gacrux-configstore-andromeda-jupiter npm...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143723 Malicious code in iota-farout-aquarius-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac6481513bad4c7765f5cfbf7dd5138500e3e165cb7064776b23ada96b85c9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147633 Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...