EUVD-2025-113553

Malicious code in forever-andromeda-sadr-barnard npm...

EUVD-2025-114793

Malicious code in css-loader-soap-elektra-andromeda npm...

EUVD-2025-111730

Malicious code in library-pavo-impulse-andromeda npm...

EUVD-2025-122635

Malicious code in request-andromeda-corvus-iota npm...

EUVD-2025-120650

Malicious code in wasat-andromeda-phoebe-child-process npm...

EUVD-2025-120542

Malicious code in webpack-andromeda-axios-jovian npm...

Malicious code in andromeda-module-xanthus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36c8b6df485741e609f00a40fecab5f5f73c08f74cb8b2e4e20b97b222cce80a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123143

Malicious code in publish-child-process-halley-andromeda npm...

EUVD-2025-112247

Malicious code in jasmine-spectron-andromeda-quark npm...

EUVD-2025-116728

Malicious code in andromeda-config-eslint-alphard npm...

EUVD-2025-122105

Malicious code in semantic-release-andromeda-cosmos-izar npm...

EUVD-2025-122583

Malicious code in rest-andromeda-ora-oauth npm...

EUVD-2025-116714

Malicious code in andromeda-zephyr-test-rigel npm...

EUVD-2025-115466

Malicious code in chalk-gulp-helmet-andromeda npm...

EUVD-2025-116716

Malicious code in andromeda-toml-norma-procyon npm...

Malicious code in andromeda-toml-norma-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25fe696f1278a9019e467586cc3593dbe3da702993f1657696c7200984b89c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123263

Malicious code in prompts-andromeda-dynamo-halley npm...

Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113190

Malicious code in global-andromeda-publish-nashira npm...

Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...