EUVD-2025-111976

Malicious code in kaus-bellatrix-async-astro npm...

EUVD-2025-122454

Malicious code in rocket-hermes-tailwindcss-astro npm...

EUVD-2025-115402

Malicious code in chariklo-mongoose-dependencies-astro npm...

EUVD-2025-123343

Malicious code in procyon-capella-astro-request npm...

EUVD-2025-120233

Malicious code in xerxes-astro-axios-rocket npm...

EUVD-2025-116483

Malicious code in astro-vortex-commitlint-prompts npm...

EUVD-2025-120166

Malicious code in yakutsk-dactyl-ini-astro npm...

EUVD-2025-112172

Malicious code in jovian-astro-aldebaran-ignite npm...

EUVD-2025-112557

Malicious code in indus-astro-materialize-miranda npm...

Malicious code in html-webpack-plugin-astro-blitz-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd60d4c15ba4743a5534b1eb8ea3d9e85b07a6b0c815b5ad417301435de30ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116489

Malicious code in astro-phenomic-yakutsk-charon npm...

EUVD-2025-116500

Malicious code in astro-enceladus-postcss-loader-iota npm...

EUVD-2025-113436

Malicious code in framework-astro-library-wasat npm...

EUVD-2025-116488

Malicious code in astro-phoebe-meissa-lyra npm...

Malicious code in materialize-lint-staged-supervisor-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3aeb341afe22c30b905d54d93148eba7939612712da0c69a9e3f2d64b6a65e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114577

Malicious code in deneb-astro-xenon-hugo npm...

MAL-2025-139610 Malicious code in astro-lynx-spectron-webdriver-cluster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9049322941e5324e2a72b89dd2bec6a6c4657ed11046ca9603fb10c28fe22098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145695 Malicious code in nuxtjs-astro-dotenv-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 361f069c8f34b46d870c8a13f9857e804499b8f943a16c7ba015da58b6adddfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147890 Malicious code in server-astro-publish-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e83cd2758dd0aac6c01e758c20525f18a2e37ad3a0c7a149db689bdb07e720e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...