EUVD-2025-114887

Malicious code in cosmos-yonder-bunyan-sagitta npm...

EUVD-2025-112469

Malicious code in inquirer-cosmos-sqlite-shelljs npm...

EUVD-2025-122225

Malicious code in schema-init-less-loader-cosmos npm...

EUVD-2025-114711

Malicious code in cypress-got-cosmos-jwt npm...

Malicious code in eridanus-blaze-selenium-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5ca898291f4cd05fce6b0768f8f6ca08ffbec4dd3bb7a9699d4b2eb9584daec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmos-soap-pegasus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36e0dc7491a58e1be275d2856f6b7447f9101ecf9d629c8ae2f6cd4f243f0444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111562

Malicious code in loopback-install-cosmos-juno npm...

EUVD-2025-114904

Malicious code in cosmos-cypress-registry-nova npm...

MAL-2025-148738 Malicious code in tool-kronos-cosmos-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bed330d8af17fc20256082e46943972fa13d6525c3250e3a246e530e91f9ea48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112644

Malicious code in hyperion-cosmos-avior-leda npm...

MAL-2025-141203 Malicious code in cosmos-commitizen-quito-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d396766edb0e28e3c059fe2e8744a122fa7919dcec485819019662e51aa0af36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140039 Malicious code in blitz-cosmos-scripts-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a7abf3d475aa8bdb5e299992047446f1bb86e8719bc25a6918e7d6506d40ac41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142071 Malicious code in envconfig-cosmos-zenith-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3efa97e6501b45136b084dc62af1e48cf36e346f9434b93fb93087c77e5bb0c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121526

Malicious code in supervisor-publish-cosmos-tethys npm...

EUVD-2025-121196

Malicious code in tool-cosmos-vuepress-buffer npm...

MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147510 Malicious code in rollup-plugin-callisto-figures-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4e3ad75f95ef1ab6168c2fc7ffe683dfbcf10052f2ad2549c971e1a6e3d55b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113968

Malicious code in eridanus-blaze-selenium-cosmos npm...

MAL-2025-140667 Malicious code in changelog-cosmos-sync-transform (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 596a89477e8326b81d0f5d1350fde952cd637ffe72226471a186f3f7cd3fe4fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...