Malicious code in pino-orbit-bootes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6c0a0cf85e2aa9ff42e45b52e8713bd5642d193b196ea160f5a6de1de04689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111295

Malicious code in meissa-orbit-bootes-javascript npm...

EUVD-2025-123214

Malicious code in proxima-child-process-bootes-rimraf npm...

EUVD-2025-123780

Malicious code in phoebe-bootes-aquarius-sqlite npm...

EUVD-2025-121750

Malicious code in spica-publish-bootes-odin npm...

EUVD-2025-116014

Malicious code in bootes-postgres-module-ursa npm...

EUVD-2025-124750

Malicious code in morgan-backend-bootes-selenium npm...

EUVD-2025-116020

Malicious code in bootes-iota-sagitta-cross-env npm...

EUVD-2025-116030

Malicious code in bootes-browserify-browserify-elara npm...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-browserify-browserify-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5019fb52ca32d108a8a468f4c801ce7877677ed203ac920a136aadcd3625da08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-request-meteor-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74d0fc73bb54021a4f5141e63b670b81c2ccda4934aae6ce89637143d45c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116012

Malicious code in bootes-sadr-epimetheus-module npm...

EUVD-2025-116023

Malicious code in bootes-enceladus-gulp-antares npm...

EUVD-2025-113121

Malicious code in got-umbriel-bootes-init npm...

EUVD-2025-116025

Malicious code in bootes-docusaurus-europa-changelog npm...

EUVD-2025-116239

Malicious code in babel-iota-command-bootes npm...

MAL-2025-142780 Malicious code in gacrux-publish-tailwindcss-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85d37f5a3c4214caccf7c82701f651d7efb773236d74e1fff5946573dbc65889 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140071 Malicious code in bootes-betelgeuse-forever-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f642659a1b6ce09ff66cc79760e53f20dc42e315da65407b73126e5b9842d69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...