Malicious code in cygnus-whitedwarf-entanglement-google (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29c3922b513f6148a513b65fa39b18700bbde729a62035425c49d61aef5cdfb3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176229

Malicious code in standard-cygnus-quasarjet-joviology npm...

EUVD-2025-178823

Malicious code in fusion-ablation-cygnus-parsec npm...

Malicious code in biogeochemistry-remark-module-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adae6019d62f9e018f84be98b737cae71b7abee0b11a6906cd18d6f03b4ca5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179438

Malicious code in cygnus-whitedwarf-entanglement-google npm...

EUVD-2025-179244

Malicious code in draco-cygnus-repository-aurora npm...

EUVD-2025-176805

Malicious code in radiometric-native-adonis-cygnus npm...

MAL-2025-187059 Malicious code in fusion-ablation-cygnus-parsec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 675a39543d6664cc9f25d2ab04083977400a9d213cdefc19363fd94b3fe9fdc2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185809 Malicious code in biogeochemistry-remark-module-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector adae6019d62f9e018f84be98b737cae71b7abee0b11a6906cd18d6f03b4ca5d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112303

Malicious code in janus-firebase-postcss-loader-cygnus npm...

EUVD-2025-114733

Malicious code in cygnus-pm2-husky-loglevel npm...

Malicious code in cygnus-levels-subscription-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c90b2d8d106bb26841ff41f634e063ad188c5b35f57d9914a41b250957cf913d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in resolvers-cygnus-subscription-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0cef4304d5ae62ad5925a3d7772113cfab7f2f31222305bbb2d2f22097c3f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-cypress-cygnus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ab3cd2a208a97ccbfb1636b9e675b1bdb1ea44289c7dac7f3c416ef7754ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116699

Malicious code in antares-cypress-cygnus-draco npm...

Malicious code in europa-jwt-cygnus-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f55ce391fea8ffa909069d2105df952902ee3d59197e6391746408eaeb185e04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114905

Malicious code in cosmos-cygnus-lyra-restart npm...

EUVD-2025-114809

Malicious code in css-loader-cygnus-restart-cluster npm...

Malicious code in auth0-cygnus-farout-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-publish-apollo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c03f11a829c2bc6b90dbf8fccd6788100da66f690ac6c5aae274f08fbe6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...