MAL-2025-139382 Malicious code in andromeda-procyon-transform-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41bc3c18575bd42b0381ace2610a01c34f9535edc43456fad874807cb9d789bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139384 Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139380 Malicious code in andromeda-octans-gravity-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b903c2efd3a322297db69de5c623515a807cd44a60b84bf8a58bc1eb00a0b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139373 Malicious code in andromeda-chromedriver-async-jasmine (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce2b8cba230c4a88157854affde9df2ec485276339955afe9e2c8525d5a40abf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144944 Malicious code in middleware-andromeda-yaml-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 14f6da311037a5e40f15cc5c0d93d855d93fa8d6db6d06ac9d4814a114af351f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147877 Malicious code in sequelize-socketio-juno-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6764d25deebfa43d5328d1f3bf9f5622e17aa5105592f702aefadab7aa8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142392 Malicious code in express-titan-andromeda-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3db56ca2e1f597d46076e860c53c02a5d847424aeba44464086eb792744037e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111725

Malicious code in library-quasar-andromeda-terser-webpack-plugin npm...

Malicious code in castor-andromeda-spawn-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 923a5dee896748b52c2d7d49f76d856e114537060fe2f8e84d7e7a1bba31b762 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2006-0150

Malware in sbrugna...

EUVD-2020-23535

Malware in sbrugna...

Malicious code in procyon-andromeda-nebula-epimetheus (npm)

The package procyon-andromeda-nebula-epimetheus was found to contain malicious code...

Malicious code in jovian-andromeda-altair-auriga (npm)

The package jovian-andromeda-altair-auriga was found to contain malicious code...

Malicious code in andromeda-stratosphere-pm2-cosmos (npm)

The package andromeda-stratosphere-pm2-cosmos was found to contain malicious code...

Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm)

The package dotenv-parse-variables-norma-andromeda-testcafe was found to contain malicious code...

MAL-2025-44819 Malicious code in jovian-andromeda-altair-auriga (npm)

The package jovian-andromeda-altair-auriga was found to contain malicious code...

MAL-2025-43447 Malicious code in andromeda-stratosphere-pm2-cosmos (npm)

The package andromeda-stratosphere-pm2-cosmos was found to contain malicious code...

MAL-2025-44709 Malicious code in iota-sync-json-andromeda (npm)

The package iota-sync-json-andromeda was found to contain malicious code...