EUVD-2025-179662

Malicious code in comet-perseus-andromeda-terraforming npm...

EUVD-2025-178270

Malicious code in jovian-nodemon-winston-andromeda npm...

EUVD-2025-180307

Malicious code in asthenosphere-auth-andromeda-gacrux npm...

EUVD-2025-180431

Malicious code in andromeda-webpack-nodejs-sadr npm...

Malicious code in andromeda-webpack-nodejs-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d388bde9d4e260b9a344967865578a95635996ada4aee337f32116385eb627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177283

Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint npm...

EUVD-2025-177036

Malicious code in procyon-andromeda-configstore-javascript npm...

MAL-2025-186589 Malicious code in dione-troposphere-oscillation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3d7c0217ab6f013611a85385ba9c99c8a4cb62351eb29fac80795276366db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186333 Malicious code in cosmicray-andromeda-registry-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f212723cabf9a6a5e57c6a04ccc611ecfa4b9d6aa084c76ac18e7876b219b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179660

Malicious code in comet-private-crust-andromeda npm...

EUVD-2025-178575

Malicious code in heka-neptune-nightwatch-andromeda npm...

EUVD-2025-179864

Malicious code in castor-andromeda-izar-config npm...

Malicious code in ganymede-volcanology-meteor-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439f5aeded04421261b5e44959256e95a019859e49ea507d43c2521ec92cdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179529

Malicious code in cosmogenic-spinner-andromeda-quasarjet npm...

EUVD-2025-178018

Malicious code in loop-cosmos-perturbation-andromeda npm...

EUVD-2025-179980

Malicious code in boson-fornax-redshift-andromeda npm...

EUVD-2025-176657

Malicious code in restart-andromeda-levels-geckodriver npm...

EUVD-2025-179549

Malicious code in cosmicray-andromeda-registry-npm npm...

EUVD-2025-180432

Malicious code in andromeda-impulse-quasarjet-elara npm...

EUVD-2025-176194

Malicious code in stream-andromeda-proxima-loglevel npm...