EUVD-2025-177036

Malicious code in procyon-andromeda-configstore-javascript npm...

EUVD-2025-179980

Malicious code in boson-fornax-redshift-andromeda npm...

EUVD-2025-180433

Malicious code in andromeda-grus-leda-leda npm...

EUVD-2025-176657

Malicious code in restart-andromeda-levels-geckodriver npm...

EUVD-2025-177432

Malicious code in optimize-css-assets-webpack-plugin-polaris-docusaurus-andromeda npm...

Malicious code in andromeda-webpack-nodejs-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d388bde9d4e260b9a344967865578a95635996ada4aee337f32116385eb627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177283

Malicious code in pegasus-nightwatch-andromeda-prettier-stylelint npm...

EUVD-2025-179549

Malicious code in cosmicray-andromeda-registry-npm npm...

EUVD-2025-180307

Malicious code in asthenosphere-auth-andromeda-gacrux npm...

EUVD-2025-180226

Malicious code in auth0-andromeda-heka-cross-env npm...

EUVD-2025-179393

Malicious code in darkmatter-pegasus-optimize-css-assets-webpack-plugin-andromeda npm...

Malicious code in europa-fork-andromeda-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f06c976d398e6600330ef91542a8aa6d3f7aa644912faa1db980b04078a6339 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-volcanology-meteor-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 439f5aeded04421261b5e44959256e95a019859e49ea507d43c2521ec92cdfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-andromeda-configstore-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 785e4e375fc95922d8389ed7d245344faafc074033303af2c8e26d46a8b78313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176194

Malicious code in stream-andromeda-proxima-loglevel npm...

EUVD-2025-176005

Malicious code in terser-webpack-plugin-andromeda-zenobia-pavo npm...

EUVD-2025-176673

Malicious code in resolvers-semantic-ui-cosmochemistry-andromeda npm...

EUVD-2025-177871

Malicious code in meteor-australis-filament-andromeda npm...

EUVD-2025-178748

Malicious code in gemini-csv-gacrux-andromeda npm...

EUVD-2025-178649

Malicious code in gridsome-andromeda-algol-exoplanetology npm...