EUVD-2025-114125

Malicious code in element-ui-venus-avior-orbit npm...

Malicious code in semantic-ui-global-orbit-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff00da8a18770fad505f5af64be0dda74e2e3a6e3210f93b59c825b25e84dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124262

Malicious code in nova-fornax-pegasus-orbit npm...

EUVD-2025-120270

Malicious code in xenon-schema-orbit-sirius npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145918 Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145659 Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145912 Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120498

Malicious code in weywot-achernar-orbit-node-sass npm...

Malicious code in atlas-orbit-ceres-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c71dca69fcf971784d38898462de4be130994baa7d5fd5e56e0f303736b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111130

Malicious code in mini-css-extract-plugin-orbit-meissa-cluster npm...

EUVD-2025-120824

Malicious code in venus-centaurus-meteor-orbit npm...

EUVD-2025-114186

Malicious code in electron-orbit-eris-sagitta npm...

EUVD-2025-113931

Malicious code in eris-postcss-meissa-orbit npm...

EUVD-2025-122352

Malicious code in sadr-orbit-publish-request npm...

Malicious code in canopus-proxima-orbit-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e186216f85d63256fefaad2eb59f9195d58954971b2eab47d48a84c3dfb5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...