EUVD-2025-116604

Malicious code in apollo-bunyan-gravity-altair npm...

EUVD-2025-113084

Malicious code in gravity-pm2-cosmiconfig-cli npm...

EUVD-2025-121984

Malicious code in sirius-colors-betelgeuse-gravity npm...

EUVD-2025-123860

Malicious code in pegasus-upgrade-gravity-postcss npm...

Malicious code in indus-vuepress-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 842edb560ff36acfb2b0d37655c806a3ae96deac3576f8748acf76b28820150f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115200

Malicious code in command-io-gravity-orbit npm...

Malicious code in nodemon-less-gravity-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 405ba04f7fdaecd140dfc69f1313e561ea136c3ba12352ca7657e3bf0897080b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123020

Malicious code in quantum-ganymede-gravity-winston npm...

Malicious code in gravity-flare-async-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afaee9c4dea8100f153b287b329c31392a468c2d17a4394f167daf28eee72e7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in deimos-gravity-cache-elektra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 622702e688f2fb8e40276dc4b844a58c5ad13b3b4ca30106511cad457fa7130d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in init-solis-gravity-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dce95d071c98aca7f71a3d08c4ff496456f80f37ec606612dbba7ad6d14bf5be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122772

Malicious code in regulus-loopback-gravity-postgres npm...

EUVD-2025-122444

Malicious code in rocket-rocket-rate-limiter-gravity npm...

EUVD-2025-114615

Malicious code in deimos-gravity-cache-elektra npm...

EUVD-2025-112335

Malicious code in jabbah-gravity-spectron-webdriver-cassini npm...

EUVD-2025-113088

Malicious code in gravity-flare-async-foundation npm...

EUVD-2025-122054

Malicious code in sequelize-gravity-jasmine-publish npm...

EUVD-2025-112040

Malicious code in jwt-foundation-kronos-gravity npm...

MAL-2025-143021 Malicious code in gravity-chariklo-library-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143028 Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...