MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115581

Malicious code in centauri-cosmos-sirius-soap npm...

EUVD-2025-122566

Malicious code in rest-mongoose-cosmos-centaurus npm...

EUVD-2025-121655

Malicious code in start-fornax-cosmos-parcel npm...

EUVD-2025-114147

Malicious code in element-ui-chariklo-cosmos-chariklo npm...

EUVD-2025-124696

Malicious code in mutation-foundation-mocha-cosmos npm...

EUVD-2025-114896

Malicious code in cosmos-ora-draco-version npm...

Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716d370389a73f5f2d8bb1d652817fcd01c99cb04fdd4add1575b54b2c1d2d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114405

Malicious code in dotenv-cosmos-promise-css-minimizer-webpack-plugin npm...

EUVD-2025-113847

Malicious code in europa-dactyl-cosmos-subscription npm...

EUVD-2025-114899

Malicious code in cosmos-mutation-eslint-vega npm...

EUVD-2025-114898

Malicious code in cosmos-nightmare-xenon-electron-builder npm...

EUVD-2025-114900

Malicious code in cosmos-metalsmith-lint-staged-tethys npm...

Malicious code in cosmos-cypress-registry-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 184be61838d74995e813d28e8d20ce09f8082497818008ecacd08fd16637920b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114888

Malicious code in cosmos-soap-pegasus-package npm...

EUVD-2025-124267

Malicious code in nova-cli-cosmos-phoebe npm...

Malicious code in virgo-quasar-orbit-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18a6e8300a181852e113ff2fc98e322083e63a46937effefc962720baaa0258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123471

Malicious code in postgres-webdriver-manager-cosmos-slidev npm...

Malicious code in cosmos-blitz-got-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b3cab308e3dfecb0e0f1d7e5a6ac6a093767de259085409cb5e48b1f410f5560 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...