EUVD-2025-121989

Malicious code in sirius-aurora-warp-native npm...

EUVD-2025-115561

Malicious code in centaurus-kinetic-sirius-commitizen npm...

EUVD-2025-111783

Malicious code in less-loader-sirius-perseus-loglevel npm...

EUVD-2025-121972

Malicious code in sirius-gatsby-subscription-nodemon npm...

EUVD-2025-115581

Malicious code in centauri-cosmos-sirius-soap npm...

EUVD-2025-113263

Malicious code in gatsby-redis-sirius-halley npm...

EUVD-2025-112513

Malicious code in ini-puppeteer-sirius-heka npm...

MAL-2025-140940 Malicious code in commitizen-sirius-levels-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d4da1d7df5154dbec6dc9e1b5df6c8a185d3ee33fc1050930d94bfe6457cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-rest-atlas-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cbf9c3a8be98e085596d912e2d26f66b7541cabe171e657f3640996ee2f23be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120626

Malicious code in wasat-terser-sirius-aldebaran npm...

EUVD-2025-121100

Malicious code in triton-sirius-redis-eslint npm...

EUVD-2025-121949

Malicious code in sirius-rollup-despina-meissa npm...

Malicious code in antares-sirius-janus-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8551f142ce2cdd90b79d237c0616d99e1767b3b5b2376a82ea5dd9334bd47dca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113176

Malicious code in global-got-sirius-antd npm...

EUVD-2025-121983

Malicious code in sirius-config-levels-umbriel npm...

EUVD-2025-111918

Malicious code in koa-kaus-sirius-draco npm...

MAL-2025-141838 Malicious code in dynamo-sirius-envconfig-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a2df72fdf1db31d3ba69f10d1afc738c0f61de9b9b53083f7d7d2e1388e1bf4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142822 Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...