EUVD-2025-179862

Malicious code in castor-callisto-miranda-quasar npm...

EUVD-2025-180348

Malicious code in arcturus-bellatrix-standard-miranda npm...

EUVD-2025-176279

Malicious code in spawn-miranda-publish-galaxy npm...

EUVD-2025-177300

Malicious code in passport-semantic-ui-miranda-dotenv-safe npm...

EUVD-2025-177807

Malicious code in miranda-koa-fetch-duplex npm...

EUVD-2025-179539

Malicious code in cosmicweb-miranda-xerxes-uglify-js npm...

EUVD-2025-176108

Malicious code in supernova-miranda-ophiuchus-resonance npm...

EUVD-2025-177052

Malicious code in private-centauri-miranda-areology npm...

EUVD-2025-176957

Malicious code in proxima-sequelize-miranda-chalk npm...

EUVD-2025-177817

Malicious code in miranda-borealis-nova-dotenv-safe npm...

EUVD-2025-176358

Malicious code in sirius-miranda-astrometry-exoplanetology npm...

MAL-2025-188918 Malicious code in proxima-sequelize-miranda-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11fcfe00fd6afb92e1706c29463826fc87304a0c02b85c53af1d7e3625974591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176637

Malicious code in rigel-miranda-cache-cz-conventional-changelog npm...

MAL-2025-189159 Malicious code in relay-xanadu-playwright-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f5b343566d9c2b440cb6c55468fbad158ae781470ddb8529d7f26d72f7a9e78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188066 Malicious code in miranda-cosmos-resonance-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95e97f651188e953913cd0aa5f218e99332b565f20b2a3260e5b791bee3db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185540 Malicious code in arcturus-bellatrix-standard-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7609f325b00b45170897f239a83a8f9f0a9ba0025c5dc5641331b70050b2b2ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124860

Malicious code in miranda-sirius-jasmine-gatsby npm...

EUVD-2025-113596

Malicious code in firebase-server-miranda-jupiter npm...

Malicious code in fork-writable-miranda-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa2c06e94df0ee3bbe0de2fafb23ce4891a4357d3007dc2d8241ab688d448ba3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...