EUVD-2025-121981

Malicious code in sirius-cressida-gulp-subscription npm...

Malicious code in commitizen-spectron-webdriver-resolvers-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f395643d9600a61aabe9f53d23f3b667c7024f70af1c64bf477d9fe481b95737 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pino-altair-uninstall-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0423eb7c4257b5d212c7e4a2eddf4cdb96433580e42544234fa6e5818cbd10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116444

Malicious code in atlas-sirius-comet-europa npm...

Malicious code in geckodriver-uninstall-husky-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7a2b7f6230965f27a6954f78531a9e677cb5f7407f313086cab21ff0979a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121965

Malicious code in sirius-leda-algol-flare npm...

EUVD-2025-111336

Malicious code in mdx-sirius-buffer-dione npm...

EUVD-2025-114183

Malicious code in electron-polaris-sirius-apex npm...

EUVD-2025-113818

Malicious code in europa-sirius-graphql-got npm...

Malicious code in commitizen-sirius-levels-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d4da1d7df5154dbec6dc9e1b5df6c8a185d3ee33fc1050930d94bfe6457cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111387

Malicious code in markdownlint-sirius-rehype-farout npm...

Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147955 Malicious code in sirius-gulp-playwright-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c521360de0b0ca3d58c926ad007a3d8f6528de76ca5395d2ffb8fc67ee2b88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144195 Malicious code in koa-kaus-sirius-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5da38434c856097646612b2314c16d72307a75149247333f78b7090326adf12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140799 Malicious code in cli-geckodriver-sirius-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8e1410ae9b38e65f7afbdffabb2ae9666d120b7fd9146797cb25adf35a46ede This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147943 Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145453 Malicious code in nightwatch-achernar-cordelia-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 105fc85e072ece9fd5861361f709213a2b73b7a1f06aecff21a9576fc64a26ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140940 Malicious code in commitizen-sirius-levels-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0d4da1d7df5154dbec6dc9e1b5df6c8a185d3ee33fc1050930d94bfe6457cd3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142822 Malicious code in ganymede-sirius-triton-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fba9bfee3d27850afd5afcbc2fd48b4c5c1a2dca01fdc00594dff38486c92629 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147967 Malicious code in sirius-pm2-sedna-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 674c13b5f1d11191da77116b519f11e1a910d57f3667552ec4027ad75f72609e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...