EUVD-2025-111857

Malicious code in leda-andromeda-spectron-neptune npm...

EUVD-2025-116723

Malicious code in andromeda-module-xanthus-arcturus npm...

EUVD-2025-116725

Malicious code in andromeda-enceladus-prettier-stylelint-server npm...

EUVD-2025-121878

Malicious code in socketio-command-andromeda-async npm...

EUVD-2025-123263

Malicious code in prompts-andromeda-dynamo-halley npm...

EUVD-2025-115626

Malicious code in castor-andromeda-spawn-gulp npm...

EUVD-2025-114307

Malicious code in duplex-andromeda-xanthus-selenium npm...

EUVD-2025-122224

Malicious code in schema-semantic-release-andromeda-celeste npm...

Malicious code in andromeda-dagda-mui-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e6d7338006e8c1b1737fa69cdb4322505b94d628c9feb9845f90dcbeadef22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jasmine-spectron-andromeda-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84e866e191c768ffc9613fc848c8413085a60f1120771feb660c7f58664e0e6f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116284

Malicious code in axios-andromeda-dione-nightwatch npm...

EUVD-2025-116137

Malicious code in betelgeuse-andromeda-supervisor-solis npm...

EUVD-2025-116201

Malicious code in barnard-andromeda-indus-magellan npm...

EUVD-2025-116722

Malicious code in andromeda-octans-gravity-electron-builder npm...

EUVD-2025-114599

Malicious code in delphinus-andromeda-jasmine-slides npm...

Malicious code in tool-andromeda-kinetic-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fd6d024ed78c25836f75684b27d647a8f118519dabf7f00a4d1a5feecaf5977 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116225

Malicious code in backend-andromeda-chakra-ui-callback npm...

EUVD-2025-113328

Malicious code in galaxy-andromeda-non-blocking-xml npm...

EUVD-2025-116610

Malicious code in apollo-andromeda-unuk-reveal-md npm...

Malicious code in andromeda-csrf-got-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b156646e5ae6831d28447dfb85a6d23732f46c59aebb936a8622ec2da9d24ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...