EUVD-2025-113290

Malicious code in ganymede-sirius-triton-grus npm...

EUVD-2025-121980

Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex npm...

EUVD-2025-112329

Malicious code in jabbah-node-sass-neptune-sirius npm...

EUVD-2025-122787

Malicious code in registry-sirius-testcafe-sails npm...

EUVD-2025-112397

Malicious code in iota-configstore-sirius-tailwindcss npm...

EUVD-2025-112778

Malicious code in hermes-xml-auth0-sirius npm...

EUVD-2025-120403

Malicious code in winston-sirius-lynx-publish npm...

Malicious code in procyon-query-chakra-ui-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b14a8cab438784c55e39f1084827f26f50969dca38f24fbfb7e001ffcc207702 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121958

Malicious code in sirius-pm2-sedna-rollup npm...

EUVD-2025-121956

Malicious code in sirius-prompts-thuban-aether npm...

MAL-2025-141110 Malicious code in cordelia-sirius-markdownlint-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bf7ac8e53cfb963f4716c2a371204c3055919800eccfbb8b4992bc33d0147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147976 Malicious code in sirius-rollup-despina-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fa05f73f303538e8cd6f0ac16009ddabcf7a71a2bb068c2a2ff4856715ddf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147969 Malicious code in sirius-prompts-thuban-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a3249af939c3e509102ed62de1da79187ada577499b73ff4db43ef95cd75ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149527 Malicious code in winston-sirius-lynx-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc3250323d484e817f69507a804d6b0379ef2de404ac143263edc581d1201620 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147980 Malicious code in sirius-taurus-achernar-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c50c4cc6027074757c03a706abdd29d05f5adc28296556b0a8cff59c1b16c4dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147978 Malicious code in sirius-spawn-chromedriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dc5d124420e86b1c5400344bb1baaefbf2c44048bd0b668422e414bac3499a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147937 Malicious code in sirius-cache-jasmine-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4f0b886a8e9060a0198b0def36f25a5f7eadc58dbcf81abbf26dc31ece86a1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147973 Malicious code in sirius-resolvers-pm2-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5b5cbb1e0e4935676cf3ee3d871ea76f06f61c680035426f909d71303cc289f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139655 Malicious code in atlas-radiant-sirius-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 693785909b6a2f6ec0efded6f239ca9b5178f141954c0652b3b1996fdf9303b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...