MAL-2025-187525 Malicious code in io-quark-babel-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4b40a9ef6ba2338b307f6019ef8cff798ca04f067fafe984721e61b3924902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186068 Malicious code in centaurus-test-rollup-webdriver-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6148929a592e573d8d4974b55e488857355621d8e6308aabba97db6b5521aeb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186066 Malicious code in centaurus-quasar-module-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a29e050252b3c774ca548dd99315e0f8c4a20a46b58ff9253a699a09e756ea1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114531

Malicious code in dependencies-radiant-centaurus-lyra npm...

EUVD-2025-111368

Malicious code in materialize-meteor-frontend-centaurus npm...

EUVD-2025-112049

Malicious code in jupiter-sqlite-centaurus-mira npm...

EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

EUVD-2025-114637

Malicious code in dagda-hydra-centaurus-hexo npm...

EUVD-2025-114709

Malicious code in cypress-library-centaurus-meteor npm...

EUVD-2025-124543

Malicious code in neptune-redis-centaurus-phoenix npm...

EUVD-2025-115850

Malicious code in bunyan-quasar-centaurus-resolvers npm...

Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113070

Malicious code in gridsome-gridsome-centaurus-helios npm...

EUVD-2025-115556

Malicious code in centaurus-reveal-md-ignite-dactyl npm...

Malicious code in nconf-thuban-centaurus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector deee308073cd092d17a74292e5cebc2292e92286732c43f143f213de23e65479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120389

Malicious code in wolf-centaurus-link-parcel npm...

EUVD-2025-115551

Malicious code in centaurus-venus-ophiuchus-umbra npm...

EUVD-2025-122480

Malicious code in rigel-websockets-centaurus-lyra npm...

EUVD-2025-115560

Malicious code in centaurus-mongoose-antares-ora npm...

Malicious code in centaurus-websockets-enceladus-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7c4fe990f20f5b2bf6fbfb73edd295ad5982a6f4f9067dbab39d5b66f8ba8176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...