EUVD-2025-177531

Malicious code in nova-astro-playwright-mira npm...

EUVD-2025-178295

Malicious code in jasmine-ichnology-astro-proteomics npm...

EUVD-2025-178275

Malicious code in jest-astro-despina-aurora npm...

EUVD-2025-180350

Malicious code in archaeometry-rollup-plugin-astro-install npm...

EUVD-2025-180304

Malicious code in astro-cors-pulsar-neutrino npm...

EUVD-2025-176888

Malicious code in pyxis-asthenosphere-astro-server npm...

EUVD-2025-180170

Malicious code in axios-astro-html-webpack-plugin-algol npm...

EUVD-2025-178048

Malicious code in local-astro-inquirer-neptune npm...

Malicious code in astro-helios-nightwatch-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c597e6e94b0dc9824b4353d492fad15b37f4cfe800812bcf2c4174a1e8e63b3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-titan-fornax-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 505ab67a6297012e58bbbca384b01496596446cd811f997a2a86a2baf414a6d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178887

Malicious code in flare-commitlint-hydra-astro npm...

EUVD-2025-176014

Malicious code in terraforming-astro-virgo-toml npm...

MAL-2025-186081 Malicious code in chai-mesosphere-astro-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 71f500d392e79b09d20edac037fb631418c2a0f9db9f0dc9a1e9e0a350f6138b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186995 Malicious code in flare-commitlint-hydra-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e15093f898681067658fdbfcee562bc41426c8b5067bf87e0a42fefce8815f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179801

Malicious code in chai-mesosphere-astro-postgres npm...

EUVD-2025-180303

Malicious code in astro-helios-nightwatch-sagitta npm...

EUVD-2025-175973

Malicious code in testcafe-titan-fornax-astro npm...

Malicious code in nova-astro-playwright-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be6aa5807609425f2a33e522f29ae44baadab83adcc49c1bc3035527e455cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185357 Malicious code in abiogenesis-proxima-astro-backend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d17178550a24192e99f40c2a9a3ba7bbd1e503c96df3ba401baff83d82ccdc48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Astro 跨站脚本漏洞

Astro is a web framework for content-driven websites in the Astro open source. A cross-site scripting vulnerability exists in Astro versions 5.2.0 through prior to 5.15.6, which stems from a reflective cross-site scripting vulnerability in the development server error page that could lead to the...