EUVD-2025-121675

Malicious code in standard-bootstrap-restart-orbit npm...

EUVD-2025-121691

Malicious code in sqlite-orbit-xenos-heka npm...

EUVD-2025-121304

Malicious code in tethys-mongodb-orbit-nconf npm...

EUVD-2025-120812

Malicious code in venus-orbit-husky-morgan npm...

EUVD-2025-124006

Malicious code in orbit-triton-request-andromeda npm...

EUVD-2025-120270

Malicious code in xenon-schema-orbit-sirius npm...

EUVD-2025-124019

Malicious code in orbit-carpo-stop-heka npm...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-121247

Malicious code in titan-janus-celeste-orbit npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-122326

Malicious code in sagitta-express-reveal-md-orbit npm...

EUVD-2025-123084

Malicious code in pulsar-orbit-capella-indus npm...

Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112189

Malicious code in jest-forever-adonis-orbit npm...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-loop-orbit-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in titan-janus-celeste-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84f955fa95e7d60cba6f2f29a268b39d549da5ca42a8ca47f19f4be2f42e78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...