MAL-2025-186589 Malicious code in dione-troposphere-oscillation-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd3d7c0217ab6f013611a85385ba9c99c8a4cb62351eb29fac80795276366db7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in andromeda-webpack-nodejs-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1d388bde9d4e260b9a344967865578a95635996ada4aee337f32116385eb627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-134931

Malicious code in @mizukiyakane/andromeda npm...

Malicious code in phenomic-spectron-webdriver-sqlite-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57cf050f5999ef136c62aab938cbfd67f9f963f2486f67de8c022e43e54ed973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in regulus-framework-chai-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7dec6125e6eda21ae58cd523b9bcf05322c40958c07333127c5f29c35ea7baa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115466

Malicious code in chalk-gulp-helmet-andromeda npm...

Malicious code in mutation-xml-hologram-andromeda (npm)

The package mutation-xml-hologram-andromeda was found to contain malicious code...

MAL-2025-39002 Malicious code in webdriverio-oortcloud-rigel-andromeda (npm)

The package webdriverio-oortcloud-rigel-andromeda was found to contain malicious code...

MAL-2025-14510 Malicious code in andromeda-eslint-config-graviton-ophiuchus (npm)

The package andromeda-eslint-config-graviton-ophiuchus was found to contain malicious code...