MAL-2025-140551 Malicious code in centaurus-reveal-md-ignite-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42ad9a8d97b4b58806b6890b86891c4eefd39717f0342701200db99c387bc1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122769

Malicious code in regulus-perseus-aldebaran-centaurus npm...

Malicious code in bunyan-quasar-centaurus-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a8e3f8afe9cd02566afc8188735a8f9203d9a9305958c4124e46a4816455542 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122661

Malicious code in repository-cross-env-centaurus-colors npm...

EUVD-2025-112122

Malicious code in jsonp-centaurus-lyra-markdown npm...

EUVD-2025-112474

Malicious code in inquirer-betelgeuse-perseus-centaurus npm...

EUVD-2025-112184

Malicious code in jest-meteor-centaurus-barnard npm...

Malicious code in centaurus-reveal-md-ignite-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b42ad9a8d97b4b58806b6890b86891c4eefd39717f0342701200db99c387bc1d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in jest-meteor-centaurus-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbacca549b788fec5ad0c9e1142e7c3f46b32be1fe505973ced9b749179f29b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115558

Malicious code in centaurus-publish-zenith-transport npm...

EUVD-2025-115840

Malicious code in cache-centaurus-dagda-centaurus npm...

Malicious code in centaurus-scripts-gulp-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27023d9210002e8a159d274507e19749d15b77741058b139d23b3f39f719fa99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121637

Malicious code in stop-centaurus-meissa-zenobia npm...

Malicious code in testcafe-centaurus-europa-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 63cba83b8eaa4158a54bf908f388a4b53f35a21124e1a87f75a2f4834c212ab8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

EUVD-2025-120341

Malicious code in xanadu-centaurus-scorpius-babel npm...

EUVD-2025-115562

Malicious code in centaurus-fork-webpack-react-bootstrap npm...

EUVD-2025-111444

Malicious code in magellan-uninstall-centaurus-kronos npm...

EUVD-2025-121249

Malicious code in titan-fork-centaurus-fornax npm...

Malicious code in dagda-hydra-centaurus-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 605b352e297554fe9236e9e8e02de5c22194bdced5da448b3c8ffe0d6a8e855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...