EUVD-2025-122860

Malicious code in react-bootstrap-jasmine-restart-jupiter npm...

EUVD-2025-124176

Malicious code in oberon-firebase-jupiter-winston npm...

EUVD-2025-123425

Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel npm...

EUVD-2025-124786

Malicious code in mongodb-jupiter-yildun-delphinus npm...

EUVD-2025-113406

Malicious code in frontend-jupiter-writable-dagda npm...

EUVD-2025-116115

Malicious code in betelgeuse-jupiter-zenith-mocha npm...

EUVD-2025-112066

Malicious code in jupiter-altair-sagitta-leda npm...

EUVD-2025-111473

Malicious code in magellan-jupiter-jupiter-iota npm...

MAL-2025-144062 Malicious code in jupiter-quito-library-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f31a2270851934c119eaeed10d434d7e124cca135839712f2f84ad56a3b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145933 Malicious code in package-jupiter-dotenv-safe-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cbaf1d581e52bc2f97c438b473587e99860b9bda454d248416a4103e16aa1b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143165 Malicious code in halley-semantic-release-playwright-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53118a5c23b7cec89c72fab6d9e61d755aa4da3e21bdf6837018483278559b7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in alphard-jupiter-yonder-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991f0d789770d2f73f9d18deecb4714e677d7f117babb9d524dd62886c2f791a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120197

Malicious code in xml-relay-jupiter-ultra npm...

EUVD-2025-122074

Malicious code in semantic-ui-jupiter-celeste-chai npm...

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144057 Malicious code in jupiter-hexo-nestjs-electron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52307fbec88a4359738f1a4633c61900298bd8f2ce42dfa1b7e7cfc137ada7d0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139816 Malicious code in await-xanadu-jupiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f1c79ed3156189c294271f1e96c1d453e72ef5d6750d32043e80fb3f9a866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...