EUVD-2025-111142

Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer npm...

EUVD-2025-112017

Malicious code in karma-centauri-nodejs-jupiter npm...

EUVD-2025-113502

Malicious code in fornax-centauri-ceres-commitlint-config-angular npm...

EUVD-2025-114087

Malicious code in enceladus-betelgeuse-nodejs-centauri npm...

EUVD-2025-121255

Malicious code in titan-centauri-less-draco npm...

EUVD-2025-112980

Malicious code in halley-centauri-norma-nova npm...

Malicious code in centauri-nconf-leda-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9dd1c3839c4c52ac299aa6ff8a234c2c2d6ebd9a1e9f5d26360e271986f7d348 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-thuban-firebase-centauri (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a802786c89a13e156760fbeb7db45c40c68ecb95bbfc4db4e4fd6dee4a743054 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113241

Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri npm...

EUVD-2025-114242

Malicious code in elara-centauri-csrf-unuk npm...

EUVD-2025-115808

Malicious code in callback-centauri-enif-zephyr npm...

EUVD-2025-115116

Malicious code in commitlint-meteor-centauri-dione npm...

EUVD-2025-115583

Malicious code in centauri-chakra-ui-upgrade-adonis npm...

EUVD-2025-113852

Malicious code in europa-centauri-xml-pavo npm...

EUVD-2025-114193

Malicious code in electron-fornax-testcafe-centauri npm...

EUVD-2025-120496

Malicious code in weywot-centauri-betelgeuse-cosmiconfig npm...

MAL-2025-142787 Malicious code in galaxy-centauri-iota-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a152542847fd6e29764406706789bc7deed6adcdaafe04f284d237d422af5695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116180

Malicious code in bellatrix-aldebaran-mira-centauri npm...

EUVD-2025-122155

Malicious code in sedna-hugo-webdriver-manager-centauri npm...

EUVD-2025-116765

Malicious code in alphard-pm2-centauri-pavo npm...