EUVD-2025-122017

Malicious code in server-weywot-cosmos-mysql npm...

EUVD-2025-121657

Malicious code in start-cosmos-soap-style-loader npm...

EUVD-2025-114889

Malicious code in cosmos-sirius-elektra-eslint npm...

Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112469

Malicious code in inquirer-cosmos-sqlite-shelljs npm...

EUVD-2025-112404

Malicious code in iota-acamar-apollo-cosmos npm...

EUVD-2025-116063

Malicious code in blitz-cosmos-scripts-lynx npm...

EUVD-2025-114895

Malicious code in cosmos-postcss-loader-iota-eslint-config npm...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140039 Malicious code in blitz-cosmos-scripts-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7abf3d475aa8bdb5e299992047446f1bb86e8719bc25a6918e7d6506d40ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114894

Malicious code in cosmos-proxima-luna-orbit npm...

EUVD-2025-111537

Malicious code in luna-phoebe-despina-cosmos npm...

Malicious code in cosmos-nightwatch-sync-redis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6396605102581091e612ef14599f18dc9d5bbd7d8323fe8a10dad551777daa5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123925

Malicious code in pavo-dotenv-safe-cosmos-cordelia npm...

MAL-2025-149136 Malicious code in version-husky-cosmos-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8ebb451c9b23e274e850692c02cbc655f875c2f814390198c1adbc3705315c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143057 Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d0b021a09de30d4b323ddd5aae4aff53aaf7dca04abdda73e5418cbb0514921 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...