EUVD-2025-111171

Malicious code in middleware-andromeda-yaml-inquirer npm...

EUVD-2025-114307

Malicious code in duplex-andromeda-xanthus-selenium npm...

EUVD-2025-116709

Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...

EUVD-2025-113768

Malicious code in exec-gravity-async-andromeda npm...

EUVD-2025-121133

Malicious code in transport-phoenix-sagitta-andromeda npm...

EUVD-2025-116724

Malicious code in andromeda-markdown-pdf-loglevel-bellatrix npm...

EUVD-2025-111857

Malicious code in leda-andromeda-spectron-neptune npm...

EUVD-2025-111800

Malicious code in less-loader-andromeda-less-loader-envconfig npm...

EUVD-2025-121488

Malicious code in tailwindcss-callback-andromeda-umbra npm...

EUVD-2025-121800

Malicious code in spectron-webdriver-andromeda-test-cors npm...

EUVD-2025-116225

Malicious code in backend-andromeda-chakra-ui-callback npm...

EUVD-2025-124851

Malicious code in mocha-andromeda-castor-loopback npm...

EUVD-2025-112843

Malicious code in hercules-andromeda-cors-aether npm...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139382 Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139384 Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139380 Malicious code in andromeda-octans-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144388 Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9782604e3784bcb5e592be57c38e46ddb5fed0911cb299819acd350f717316cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...