EUVD-2025-120887

Malicious code in ursa-apollo-xenon-europa npm...

Malicious code in xenon-version-lyra-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b102d936e27cae1f4a4a0d270ab5454a9315e36ace9caea6d9a6ee29acd289 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116352

Malicious code in auth0-kinetic-halley-xenon npm...

EUVD-2025-121778

Malicious code in spectron-webdriver-xenon-repository-quantum npm...

EUVD-2025-113623

Malicious code in firebase-bootstrap-xenon-mira npm...

Malicious code in xenon-repository-radiant-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d46799f01c1add7c954c79d53f8c463356b37c7c7e01ecf694e3104e98508858 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-sails-standard-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da0ee61cb1159197dda8361a49b1dd6dece148884308730df0c269184894e98f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123172

Malicious code in proxima-xenon-transport-janus npm...

EUVD-2025-113792

Malicious code in event-nightwatch-stop-xenon npm...

EUVD-2025-114229

Malicious code in elara-leda-xenon-carina npm...

EUVD-2025-114539

Malicious code in dependencies-install-xenon-venus npm...

EUVD-2025-121291

Malicious code in tethys-xenon-husky-celeste npm...

EUVD-2025-112238

Malicious code in jasmine-xenon-solis-sedna npm...

EUVD-2025-116523

Malicious code in ariel-atlas-xenon-chalk npm...

EUVD-2025-124142

Malicious code in octans-remark-sagitta-xenon npm...

Malicious code in deneb-astro-xenon-hugo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c30df2abcf22f557c7023e22a337b453c8f6233b50a59cb850d624a11cabd466 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146826 Malicious code in pulsar-astro-backend-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d277a175b4a65c1eeea5e6256ad1133633eeda9595eba61ab39084720699e6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145107 Malicious code in module-koa-metalsmith-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1bc283f477976680eaac5b0948d6b00ba0ea1609e62c32da3e1d5ed24f1be92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120287

Malicious code in xenon-fork-levels-docusaurus npm...

MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...