EUVD-2025-116724

Malicious code in andromeda-markdown-pdf-loglevel-bellatrix npm...

EUVD-2025-122046

Malicious code in sequelize-socketio-juno-andromeda npm...

EUVD-2025-111800

Malicious code in less-loader-andromeda-less-loader-envconfig npm...

EUVD-2025-124006

Malicious code in orbit-triton-request-andromeda npm...

EUVD-2025-122024

Malicious code in server-framework-andromeda-aurora npm...

EUVD-2025-122635

Malicious code in request-andromeda-corvus-iota npm...

Malicious code in rest-andromeda-ora-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a92c88fabf7123e7ffb64c069cfb3f6a546e509857b2531c764b7e04bf9748 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111730

Malicious code in library-pavo-impulse-andromeda npm...

EUVD-2025-113190

Malicious code in global-andromeda-publish-nashira npm...

EUVD-2025-120298

Malicious code in xanthus-phoebe-lint-andromeda npm...

EUVD-2025-123722

Malicious code in phoenix-lint-global-andromeda npm...

EUVD-2025-123854

Malicious code in perseus-ariel-andromeda-rest npm...

EUVD-2025-123143

Malicious code in publish-child-process-halley-andromeda npm...

EUVD-2025-113762

Malicious code in exec-koa-andromeda-google npm...

Malicious code in andromeda-toml-norma-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b25fe696f1278a9019e467586cc3593dbe3da702993f1657696c7200984b89c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in phenomic-spectron-webdriver-sqlite-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57cf050f5999ef136c62aab938cbfd67f9f963f2486f67de8c022e43e54ed973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149279 Malicious code in wasat-andromeda-phoebe-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d09196c4b90b3a84cf7add48bfe8e3cb2279e49e087e3e677594151a90cf41 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148150 Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62ee7b475b2f16de2e6e7f62b3abf6ed1d28eb1e3edf099e0649c2203bbd9fab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142148 Malicious code in eridanus-io-andromeda-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b61966f7ae737ec265e1bf5608c3a100b68294f97ab9385b45a839ed4ada343 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...