EUVD-2025-122014

Malicious code in shelljs-bootes-regulus-sedna npm...

EUVD-2025-111764

Malicious code in levels-bootes-charon-tool npm...

EUVD-2025-123481

Malicious code in postgres-neptune-bootes-query npm...

EUVD-2025-112554

Malicious code in indus-bootes-release-it-mui npm...

MAL-2025-140083 Malicious code in bootes-magellan-yakutsk-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d9eed43e2a4dae5f0ed3a05e412b53eb3228b4172ed85073a6b50778c948eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140018 Malicious code in blaze-bootes-concurrently-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1adc64a5812f65b3e49d253f55e9277f0ee5a6b021a841544785603baeb05ff2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140093 Malicious code in bootes-toml-non-blocking-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32250d5fdfe61a98e4d4cee9e2c18bd20f478a645751fa2a65929da0c6646063 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116024

Malicious code in bootes-electron-builder-ariel-enceladus npm...

MAL-2025-148502 Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140095 Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114521

Malicious code in dependencies-venus-install-bootes npm...

MAL-2025-145936 Malicious code in package-leda-regulus-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd8f0689326fa30f2f33ca0e7b640cd54c8dba70d9fa36308272b06574817d03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142991 Malicious code in got-umbriel-bootes-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af263708a4f3826d4a9cec48859fffbdd13f5d22aa662e98d5196726b365e86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in chai-bootes-graviton-venus (npm)

The package chai-bootes-graviton-venus was found to contain malicious code...

MAL-2025-43642 Malicious code in bootes-troposphere-spica-selenium (npm)

The package bootes-troposphere-spica-selenium was found to contain malicious code...

MAL-2025-46673 Malicious code in xenobiology-nashira-gulp-bootes (npm)

The package xenobiology-nashira-gulp-bootes was found to contain malicious code...

MAL-2025-44145 Malicious code in equinox-bootes-lyra-playwright (npm)

The package equinox-bootes-lyra-playwright was found to contain malicious code...

Malicious code in exoplanet-webdriverio-bootes-resolvers (npm)

The package exoplanet-webdriverio-bootes-resolvers was found to contain malicious code...

Malicious code in bootes-lyra-mutation-xanadu (npm)

The package bootes-lyra-mutation-xanadu was found to contain malicious code...

MAL-2025-44660 Malicious code in hydrogeology-public-hapi-bootes (npm)

The package hydrogeology-public-hapi-bootes was found to contain malicious code...