EUVD-2025-116492

Malicious code in astro-lynx-spectron-webdriver-cluster npm...

EUVD-2025-113005

Malicious code in grus-vortex-astro-sedna npm...

EUVD-2025-116497

Malicious code in astro-geckodriver-janus-helios npm...

EUVD-2025-112403

Malicious code in iota-astro-ophiuchus-ini npm...

EUVD-2025-121092

Malicious code in typeorm-astro-playwright-hercules npm...

MAL-2025-147890 Malicious code in server-astro-publish-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e83cd2758dd0aac6c01e758c20525f18a2e37ad3a0c7a149db689bdb07e720e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140335 Malicious code in callisto-init-astro-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e7dee1332ca141e642cda2234291c22182742cb21c0c4340edc739302c351aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rehype-astro-pm2-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930d442b4964528252da778f93881462ca24cd58ed6925e237ae9b5b531fe189 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146826 Malicious code in pulsar-astro-backend-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d277a175b4a65c1eeea5e6256ad1133633eeda9595eba61ab39084720699e6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-cressida-astro-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a083a2e240bd569f359ce0153cdcd1078b75e23b0cb92a3fab70d2aabb5c2194 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147460 Malicious code in rimraf-update-hyperion-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 856bb93d73cea29e9602b81c30057a610e50532b6049d7a87ef6b010f8a1aae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in forever-astro-element-ui-epimetheus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb32b73101078f30afc48ba9b5202a97f6b98b70d003ee7aa0e2098aa588b609 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122454

Malicious code in rocket-hermes-tailwindcss-astro npm...

Malicious code in rocket-hermes-tailwindcss-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1083ee175837f82ade30090d1c87abe312c2b1ffee07ae3f6ac10b31ae61d3b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114203

Malicious code in electron-builder-leda-astro-restart npm...

EUVD-2025-123343

Malicious code in procyon-capella-astro-request npm...

EUVD-2025-114577

Malicious code in deneb-astro-xenon-hugo npm...

EUVD-2025-112172

Malicious code in jovian-astro-aldebaran-ignite npm...

Malicious code in bellatrix-astro-sedna-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e877580ed0a2f032f1ffa5c39273db2878f9aa5883de2cd9220fa632d0f1307 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...