EUVD-2025-112810

Malicious code in hermes-backend-aether-aurora npm...

EUVD-2025-121399

Malicious code in terser-meissa-kaus-aurora npm...

EUVD-2025-114621

Malicious code in deimos-aurora-electron-unuk npm...

EUVD-2025-114352

Malicious code in dotenv-safe-kronos-aurora-build npm...

EUVD-2025-113064

Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora npm...

Malicious code in aurora-tailwindcss-nodejs-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e29f2c221f11923d5f6b23ee57f3071b738e1689f470d3de977ae6470d6b4c9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116388

Malicious code in aurora-yildun-karma-xanadu npm...

EUVD-2025-121228

Malicious code in toml-aurora-bulma-fomalhaut npm...

MAL-2025-145737 Malicious code in oauth-writable-aurora-docusaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d3f2a474d3e4a74eab03cf604f088784cff2d8d6ca11d9e9518f1abb8775970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116390

Malicious code in aurora-tailwindcss-nodejs-lynx npm...

EUVD-2025-122024

Malicious code in server-framework-andromeda-aurora npm...

MAL-2025-142975 Malicious code in got-aurora-altair-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139696 Malicious code in aurora-cache-soap-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ced08f984cae28d25fe2b4810bb45fc53cde4f66aa701e9112f87a78947c5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149601 Malicious code in xanadu-miranda-fetch-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cef337b74baee56faf0b2022c88234dbf3f417113cf143aa873275ff626573d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142834 Malicious code in gatsby-bootes-aurora-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a99965e1a32a6911dc41a5084a3cf4777864facb32388be0fda9734b256dd3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143928 Malicious code in jest-mdx-aurora-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91b68d4bbf9b461dbf984128d8547052b0cebeff32e91ea0cb65ef648bc2b548 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113278

Malicious code in gatsby-bootes-aurora-aquarius npm...

EUVD-2025-124184

Malicious code in oauth-writable-aurora-docusaurus npm...

EUVD-2025-114545

Malicious code in dependencies-comet-polaris-aurora npm...

Malicious code in aurora-odin-ultra-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ceb8c65851ee29f9c5c85b8287f247a6ea640fa648371b93ec85497355d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...