EUVD-2025-113320

Malicious code in galaxy-meissa-pino-blitz npm...

EUVD-2025-121609

Malicious code in stream-galaxy-loopback-rocket npm...

Malicious code in await-spawn-galaxy-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b43b63aa9b116de12f98fe72753cafc805de0801861e451fb794650f62b8952 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115086

Malicious code in config-galaxy-rimraf-quito npm...

EUVD-2025-113322

Malicious code in galaxy-karma-restart-wasat npm...

EUVD-2025-116224

Malicious code in backend-barnard-galaxy-foundation npm...

EUVD-2025-115871

Malicious code in bulma-venus-galaxy-quantum npm...

Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113326

Malicious code in galaxy-bulma-xo-halley npm...

EUVD-2025-113318

Malicious code in galaxy-semantic-release-auriga-norma npm...

EUVD-2025-116658

Malicious code in antares-uglify-js-child-process-galaxy npm...

EUVD-2025-121315

Malicious code in tethys-commitlint-galaxy-bellatrix npm...

EUVD-2025-114666

Malicious code in dactyl-galaxy-quasar-uglify-js npm...

EUVD-2025-113315

Malicious code in galaxy-webdriverio-fetch-ganymede npm...

EUVD-2025-113324

Malicious code in galaxy-csv-middleware-levels npm...

EUVD-2025-113958

Malicious code in eridanus-miranda-cors-galaxy npm...

EUVD-2025-113327

Malicious code in galaxy-apollo-phoebe-draco npm...

EUVD-2025-112461

Malicious code in inquirer-nextjs-galaxy-hyperion npm...

EUVD-2025-116294

Malicious code in await-spawn-galaxy-spica npm...

Malicious code in umbriel-transform-galaxy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4278a468d54c2a41272a00e6c27081390b88957c1609f8f70f2c538827a5afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...