EUVD-2025-123693

Malicious code in pino-orbit-bootes-janus npm...

EUVD-2025-122326

Malicious code in sagitta-express-reveal-md-orbit npm...

EUVD-2025-121132

Malicious code in transport-playwright-zenobia-orbit npm...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

EUVD-2025-124012

Malicious code in orbit-native-dotenv-oauth npm...

Malicious code in titan-janus-celeste-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e84f955fa95e7d60cba6f2f29a268b39d549da5ca42a8ca47f19f4be2f42e78f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116391

Malicious code in aurora-sails-orbit-proxima npm...

EUVD-2025-116462

Malicious code in atlas-browserify-commitlint-orbit npm...

EUVD-2025-121139

Malicious code in transport-indus-orbit-forever npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-124008

Malicious code in orbit-thuban-child-process-writable npm...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

EUVD-2025-115181

Malicious code in commitizen-concurrently-fomalhaut-orbit npm...

EUVD-2025-124009

Malicious code in orbit-reveal-md-charon-cygnus npm...

Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124006

Malicious code in orbit-triton-request-andromeda npm...

EUVD-2025-112884

Malicious code in helios-configstore-orbit-meteor npm...

Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120974

Malicious code in uninstall-comet-orbit-oauth npm...

Malicious code in lint-staged-mutation-orbit-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c9aeaa19579be18420287582995f1bdcc81002b80c09f383588846803e280a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...