EUVD-2025-112251

Malicious code in jasmine-procyon-capella-jekyll npm...

EUVD-2025-124369

Malicious code in node-sass-proxima-capella-eslint npm...

EUVD-2025-115710

Malicious code in capella-rocket-io-betelgeuse npm...

EUVD-2025-120825

Malicious code in venus-capella-mysql-google npm...

EUVD-2025-115721

Malicious code in capella-docusaurus-zenith-ophiuchus npm...

EUVD-2025-116553

Malicious code in aquarius-schema-link-capella npm...

EUVD-2025-115716

Malicious code in capella-kaus-global-restart npm...

EUVD-2025-115718

Malicious code in capella-got-norma-postcss npm...

Malicious code in capella-buffer-cypress-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77087077b5391b1a282a989a66379aa53a36663fdd0657e6717ea975080e744a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115098

Malicious code in concurrently-public-rest-capella npm...

Malicious code in airbnb-capella-lint-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b80181a2fddf012d48e5ae7bde1413806b7a1f47e0c32b51dd8cd7c05f2c632 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113559

Malicious code in fomalhaut-spinner-capella-less npm...

EUVD-2025-121773

Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local npm...

MAL-2025-148644 Malicious code in thuban-capella-zenith-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d027ed59366331190f73add52d5b05344f8b8e2a2c52ef19ff434fa7fedf00cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147824 Malicious code in semantic-release-eslint-config-grus-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c10280db9a005e16f95c876d3375736045932bf720e9a1a30bba1447072fd51 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145992 Malicious code in pavo-bootes-capella-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8bd6ede5dbb0e04dcbf0377128efc1b0a5de122059b8148a2c1126144de4294d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148152 Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f124e4d557c8feabc6de44830d46d279b20eda791ae7444d095204eba1dc2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142890 Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144281 Malicious code in leda-miranda-oberon-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 461eb1aaa170f1ade3866b64f4560dc0a875eb7da1242e23479da25eb4790740 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141908 Malicious code in electron-builder-mensa-capella-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c324de26b9b9044a959f6ee90bfbb74d52d4f086add21d9857bac277be23aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...