EUVD-2025-120260

Malicious code in xenon-warp-luna-perseus npm...

EUVD-2025-120157

Malicious code in yakutsk-luna-sadr-rest npm...

MAL-2025-144710 Malicious code in markdown-pdf-wasat-luna-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fecd59731081ac14a1d7e6bf85ea26c4a0b8aca42f3e976b461463c99dc87512 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148243 Malicious code in sqlite-transform-luna-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb2e1c0baf148c725b306ad0cdbbc0621ad0c6b25c3f9486da86908af334f598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111542

Malicious code in luna-nightwatch-pegasus-magellan npm...

MAL-2025-141580 Malicious code in dependencies-restart-luna-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144575 Malicious code in luna-orbit-inquirer-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1773b79bcf4920d77f7bc458da9b860ad326f4e1dc7734ad67764cf5102e36fa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144584 Malicious code in luna-start-prettier-stylelint-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b36b0e4f7b57545761987514b8adc6f3738abe536c5fc6500cc9826bb2af1d04 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141190 Malicious code in cosmiconfig-neptune-public-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fe4928a1a9940219865f50a24366f38c974d857bff1aed36844629daf22054f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142890 Malicious code in geckodriver-xerxes-capella-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8243976b2a0fa8bec3fb00bd12d4ac5e6c780a4786f554e126b8c60c391f23f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111285

Malicious code in meissa-prompts-winston-luna npm...

Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145087 Malicious code in mocha-luna-mdx-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634f9f8f23b87d45c52a2986d0a62793f1587cae17fed5dd47dfbaba2950f4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111535

Malicious code in luna-query-hyperion-hyperion npm...

EUVD-2025-111527

Malicious code in luna-xenos-relay-carpo npm...

MAL-2025-144547 Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141159 Malicious code in corvus-luna-chromedriver-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc57845ad897dab7e51dc698f8f4a85f4640e5b4759380e4673f476f8d7a59f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141793 Malicious code in draco-hapi-luna-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f43ca38f4a170173c94afac1558333ea2d8020e9a3392cf0aadf92300b6959d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144578 Malicious code in luna-phoebe-despina-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ecff078b7d6ee9dbb72b33f4db4f7635fa8887e98b1db63f8fcaab39c219a81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...