EUVD-2025-115056

Malicious code in configstore-gacrux-centauri-cassini npm...

Malicious code in gatsby-commitizen-centauri-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23dc81767771f097119dec1907f0870dd56482d849c952663140da2b6f431dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120653

Malicious code in warp-ursa-kastra-centauri npm...

Malicious code in centauri-enceladus-playwright-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e588972d11e7d8059b4eebdb64157f16aa516a734c8c719a0f4ce586331e6ed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149236 Malicious code in vulcan-gravity-carina-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2255b2533f27f07d85f1f3b076096769c811f06d89dbc0fbabced78c2c5c67e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142787 Malicious code in galaxy-centauri-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152542847fd6e29764406706789bc7deed6adcdaafe04f284d237d422af5695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143019 Malicious code in gravity-centauri-docusaurus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6888c4ce290373de142d4cf67f685e39935cd011f692270694a1c042724e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115116

Malicious code in commitlint-meteor-centauri-dione npm...

MAL-2025-139166 Malicious code in acamar-centauri-izar-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a65dcb67a04bce7b3e85b8d8f65260f06ca2912a4141e61cf48c2c0ad51ea95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143780 Malicious code in jabbah-hapi-eslint-config-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e9b0ecf467e4e7f27d78ea151d34cd5034fc94e10302afbc83903eab71ff875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140524 Malicious code in centauri-chakra-ui-upgrade-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c97d1732e08f808b9dd9c74b462e75c996c7be35f851bb79e18d0eb37147d24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140533 Malicious code in centauri-nconf-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd1c3839c4c52ac299aa6ff8a234c2c2d6ebd9a1e9f5d26360e271986f7d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140435 Malicious code in carpo-centauri-commitlint-config-angular-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47297371af1cf02d6849edb62adb000fcbda44132fb3a3c3954bf6ef90e9675a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140298 Malicious code in callback-centauri-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a679174385d73c39620a1a37cbb39b69e452416d7479c489f935ba04496cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115580

Malicious code in centauri-delphinus-cypress-spinner npm...

MAL-2025-143132 Malicious code in halley-centauri-norma-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ddfa965dcb56981dcecfed8762533200cf42e04ee91f3a9e618f669a5e796a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116480

Malicious code in async-centauri-sirius-vega npm...

Malicious code in centauri-io-xanthus-yildun (npm)

The package centauri-io-xanthus-yildun was found to contain malicious code...

Malicious code in archaeoastronomy-panspermia-figures-centauri (npm)

The package archaeoastronomy-panspermia-figures-centauri was found to contain malicious code...

Malicious code in equinox-castor-centauri-cressida (npm)

The package equinox-castor-centauri-cressida was found to contain malicious code...