MAL-2025-149279 Malicious code in wasat-andromeda-phoebe-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139380 Malicious code in andromeda-octans-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122018

Malicious code in server-sagitta-andromeda-centaurus npm...

EUVD-2025-116714

Malicious code in andromeda-zephyr-test-rigel npm...

Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112320

Malicious code in jabbah-stop-fork-andromeda npm...

Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112874

Malicious code in helios-procyon-acamar-andromeda npm...

Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116726

Malicious code in andromeda-dagda-mui-xenon npm...

EUVD-2025-121775

Malicious code in spica-andromeda-loglevel-terser-webpack-plugin npm...

EUVD-2025-112247

Malicious code in jasmine-spectron-andromeda-quark npm...

EUVD-2025-122776

Malicious code in regulus-framework-chai-andromeda npm...

Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121201

Malicious code in tool-andromeda-kinetic-scripts npm...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-116755

Malicious code in altair-ceres-superagent-andromeda npm...

EUVD-2025-116719

Malicious code in andromeda-public-zenobia-hermes npm...

Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...