EUVD-2025-114709

Malicious code in cypress-library-centaurus-meteor npm...

EUVD-2025-115373

Malicious code in charon-semantic-release-vuepress-centaurus npm...

EUVD-2025-116174

Malicious code in bellatrix-centaurus-toml-firebase npm...

Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115561

Malicious code in centaurus-kinetic-sirius-commitizen npm...

EUVD-2025-122080

Malicious code in semantic-ui-convict-centaurus-husky npm...

Malicious code in centaurus-vuepress-concurrently-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac3d17c254d20bfae82b30318943e94b6c475fe6eaa7f65fc00ca1b3cb773d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120389

Malicious code in wolf-centaurus-link-parcel npm...

EUVD-2025-112122

Malicious code in jsonp-centaurus-lyra-markdown npm...

EUVD-2025-112422

Malicious code in install-writable-centaurus-wolf npm...

EUVD-2025-115560

Malicious code in centaurus-mongoose-antares-ora npm...

Malicious code in centaurus-arcturus-prettier-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04cd34978d0466f39ad12f91aa649f65f0e96d02b2fd1d6860accb169bc82db5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123777

Malicious code in phoebe-centaurus-pipe-gravity npm...

EUVD-2025-122480

Malicious code in rigel-websockets-centaurus-lyra npm...

EUVD-2025-115850

Malicious code in bunyan-quasar-centaurus-resolvers npm...

Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c19b305f14370fe36dcec295ccbe9b4d060fc0c026b5114107f721facbbccc5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114637

Malicious code in dagda-hydra-centaurus-hexo npm...

Malicious code in centaurus-reveal-md-ignite-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42ad9a8d97b4b58806b6890b86891c4eefd39717f0342701200db99c387bc1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-ultra-centaurus-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07c0db9ddaddac7633e63071583d00d82037f15b75a57cb7b68e460390a99a40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...