Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111696

Malicious code in link-ora-loglevel-andromeda npm...

EUVD-2025-121578

Malicious code in subscription-andromeda-leda-antares npm...

Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112320

Malicious code in jabbah-stop-fork-andromeda npm...

Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in castor-andromeda-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5dee896748b52c2d7d49f76d856e114537060fe2f8e84d7e7a1bba31b762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112874

Malicious code in helios-procyon-acamar-andromeda npm...

EUVD-2025-120542

Malicious code in webpack-andromeda-axios-jovian npm...

EUVD-2025-113962

Malicious code in eridanus-io-andromeda-pegasus npm...

Malicious code in express-andromeda-xml-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9edf12aebde5c3ce7e57862217e21738abef833201537b0dc7637e4a1dc93d12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122583

Malicious code in rest-andromeda-ora-oauth npm...

EUVD-2025-122307

Malicious code in sagitta-registry-andromeda-postcss npm...

EUVD-2025-124851

Malicious code in mocha-andromeda-castor-loopback npm...

EUVD-2025-113718

Malicious code in express-titan-andromeda-shelljs npm...

EUVD-2025-121488

Malicious code in tailwindcss-callback-andromeda-umbra npm...

EUVD-2025-116716

Malicious code in andromeda-toml-norma-procyon npm...

EUVD-2025-122235

Malicious code in schema-andromeda-typeorm-link npm...

MAL-2025-147633 Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a5b1bfa53ba310f253f18851fdadd7844eb8de63467a2bfbabce2ddef447a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144944 Malicious code in middleware-andromeda-yaml-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f6da311037a5e40f15cc5c0d93d855d93fa8d6db6d06ac9d4814a114af351f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...