EUVD-2025-116820

Malicious code in aldebaran-inquirer-sirius-blaze npm...

Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121345

Malicious code in test-sirius-gatsby-forever npm...

EUVD-2025-123142

Malicious code in publish-concurrently-gacrux-sirius npm...

Malicious code in sirius-resolvers-quantum-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9db3977e1c0b46f69d0641f5f899e596f6e5e405a6391f66e5cb49368d1de315 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121971

Malicious code in sirius-geckodriver-enif-child-process npm...

Malicious code in wasat-terser-sirius-aldebaran (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56799176c6615904f4c2fa7cf443e635efe39e0b174d0f4a167414ada64497d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121955

Malicious code in sirius-pyxis-cypress-cressida npm...

Malicious code in polaris-postgres-sirius-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122984

Malicious code in quark-sirius-fornax-odin npm...

Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-sedna-sass-loader-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116480

Malicious code in async-centauri-sirius-vega npm...

EUVD-2025-121954

Malicious code in sirius-readable-centaurus-firebase npm...

EUVD-2025-121891

Malicious code in soap-sass-loader-sirius-cache npm...

EUVD-2025-122610

Malicious code in request-server-ariel-sirius npm...

EUVD-2025-121965

Malicious code in sirius-leda-algol-flare npm...

EUVD-2025-111282

Malicious code in meissa-sirius-mensa-stop npm...

Malicious code in vortex-octans-adonis-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4832831988a84233762d969fc55c8a6d390648259d338d79c3a6ae09efd58d61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-query-chakra-ui-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8cab438784c55e39f1084827f26f50969dca38f24fbfb7e001ffcc207702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...