EUVD-2025-116394

Malicious code in aurora-publish-markdown-barnard npm...

EUVD-2025-114467

Malicious code in dione-aurora-less-loader-pegasus npm...

EUVD-2025-113925

Malicious code in eris-vuepress-aurora-local npm...

Malicious code in got-aurora-altair-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63d68a0461ad4916502c60d7cd2211f6b03c381ea1d81803a7a2a11aeaddc820 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114120

Malicious code in eleventy-aurora-csrf-semantic-release npm...

Malicious code in mira-aurora-jekyll-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c37198abfa595ebad14a4918dff72d195729333be2f1385ab33554a1a5bbf5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aurora-odin-ultra-fomalhaut (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 573ceb8c65851ee29f9c5c85b8287f247a6ea640fa648371b93ec85497355d26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120330

Malicious code in xanadu-miranda-fetch-aurora npm...

EUVD-2025-113707

Malicious code in farout-chromedriver-aurora-tailwindcss npm...

EUVD-2025-116392

Malicious code in aurora-run-script-ophiuchus-rehype npm...

EUVD-2025-116403

Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin npm...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145950 Malicious code in parcel-aurora-pegasus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0850d9ceb923ea3b8c1fae4e07e33f2a81a4e2efb322eab5c70dcae054468a4a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143834 Malicious code in janus-server-aurora-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2daf5864f511b2fd8658d01350244d0ae648e11c6aab4d1f206632120899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124225

Malicious code in nuxtjs-aurora-bellatrix-jekyll npm...

EUVD-2025-116389

Malicious code in aurora-upgrade-venus-barnard npm...

EUVD-2025-123597

Malicious code in polaris-aurora-mensa-cluster npm...

Malicious code in cross-env-yaml-meteor-aurora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20d215441ec813faf80ea353ec77a212352b199912065942b6bb274f8b4c5103 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116813

Malicious code in algol-aurora-uninstall-public npm...

Malicious code in testcafe-scripts-aurora-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6c2116a7fd36b06664e2ff05d077433bce5510c5ca44040ecff506953e10843 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...