EUVD-2025-122887

Malicious code in rate-limiter-config-galaxy-ophiuchus npm...

EUVD-2025-124499

Malicious code in nextjs-postcss-galaxy-triton npm...

Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111611

Malicious code in loglevel-chakra-ui-galaxy-ophiuchus npm...

EUVD-2025-115423

Malicious code in changelog-slides-update-galaxy npm...

Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114231

Malicious code in elara-impulse-galaxy-quark npm...

EUVD-2025-113319

Malicious code in galaxy-nodejs-ultra-wasat npm...

Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-aquarius-mui-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5a48949c69a045ee791279a04c56a2f449b7a11d0948500b5f1c1dedefea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122175

Malicious code in scripts-semantic-release-galaxy-apollo npm...

EUVD-2025-112006

Malicious code in karma-galaxy-proxima-bunyan npm...

EUVD-2025-113391

Malicious code in fusion-aquarius-mui-galaxy npm...

Malicious code in galaxy-gulp-socketio-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5145d9682743031b8b7616fe119454d6603e023db328a3b4a5a52e7f22c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114228

Malicious code in elara-lint-staged-ophiuchus-galaxy npm...

Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-impulse-galaxy-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...