Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120856

Malicious code in ursa-sass-loader-orbit-async npm...

EUVD-2025-115456

Malicious code in chalk-orbit-dynamo-cosmiconfig npm...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146228 Malicious code in pino-orbit-bootes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6c0a0cf85e2aa9ff42e45b52e8713bd5642d193b196ea160f5a6de1de04689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122001

Malicious code in shelljs-nestjs-orbit-release-it npm...

EUVD-2025-121409

Malicious code in terser-europa-start-orbit npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

EUVD-2025-111540

Malicious code in luna-orbit-inquirer-convict npm...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

EUVD-2025-111295

Malicious code in meissa-orbit-bootes-javascript npm...

EUVD-2025-111195

Malicious code in meteor-nconf-eslint-orbit npm...

EUVD-2025-111130

Malicious code in mini-css-extract-plugin-orbit-meissa-cluster npm...

EUVD-2025-112500

Malicious code in init-antares-deneb-orbit npm...

EUVD-2025-112128

Malicious code in json-umbriel-orbit-europa npm...

EUVD-2025-112108

Malicious code in jsonp-pino-orbit-elara npm...

Malicious code in atlas-orbit-ceres-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c71dca69fcf971784d38898462de4be130994baa7d5fd5e56e0f303736b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...