EUVD-2025-114732

Malicious code in cygnus-publish-apollo-husky npm...

EUVD-2025-121039

Malicious code in ultra-bunyan-cygnus-adonis npm...

EUVD-2025-124719

Malicious code in mui-cypress-blitz-cygnus npm...

EUVD-2025-111212

Malicious code in meteor-comet-mdx-cygnus npm...

Malicious code in proxima-soap-nuxtjs-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfef6f6fc5dc73022bb710eebac77b0e7019e7bc797f9aa9f8c2716a3683d588 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114747

Malicious code in cygnus-atlas-juno-phenomic npm...

EUVD-2025-112193

Malicious code in jest-cygnus-chariklo-rimraf npm...

EUVD-2025-111494

Malicious code in magellan-alphard-cygnus-sirius npm...

EUVD-2025-120985

Malicious code in umbriel-install-cygnus-markdown npm...

EUVD-2025-124292

Malicious code in non-blocking-ursa-postgres-cygnus npm...

Malicious code in solis-sequelize-koa-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e3e8c5a3977cec9560fe30b6c2fd0263b5738ea521484c63f631986c17a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-stream-lyra-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91d6ed1a45350dc66c59200a558dfd1805694304dfb26a4721875c058d4b0c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123097

Malicious code in publish-zenith-cygnus-nashira npm...

MAL-2025-141376 Malicious code in cygnus-pm2-husky-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e756a78cd162e580971123f972f39376761844b3120bd48a3baf9df5460a8747 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149484 Malicious code in winston-changelog-cygnus-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b60b88130d8ae31195152a9e0bfae2ba8966159706a17f71bd595bec96eee77b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124885

Malicious code in miranda-firebase-non-blocking-cygnus npm...

EUVD-2025-123661

Malicious code in pipe-cygnus-telesto-postcss npm...

EUVD-2025-123898

Malicious code in pegasus-cygnus-pegasus-pegasus npm...

EUVD-2025-123904

Malicious code in pegasus-backend-enif-cygnus npm...

Malicious code in gulp-iota-sass-loader-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 348f1372ca03ce7dde0184d8847197c18ff8c541c9c70bf0f2631bc74efac9c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...