Malicious code in archaeometry-rollup-plugin-astro-install (npm)

Source: amazon-inspector 1dcfdaa9a4222852d826a3e0212b6a3584a79729124a8ff9ee1178222bb3de18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-122998

Malicious code in quark-foundation-astro-install npm...

MAL-2025-29168 Malicious code in photon-astro-install-singularity (npm)

The package photon-astro-install-singularity was found to contain malicious code...

Malicious code in photon-astro-install-singularity (npm)

The package photon-astro-install-singularity was found to contain malicious code...