Malicious code in koa-radioastronomy-cosmogenic-mongoose (npm)

The package koa-radioastronomy-cosmogenic-mongoose was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in kardashevscale-element-ui-element-ui-cosmogenic (npm)

The package kardashevscale-element-ui-element-ui-cosmogenic was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in enceladus-eslint-config-readable-cosmogenic (npm)

Source: amazon-inspector 6b1fc764b9f62908de5e4c0fab8df232ef0a5c42597b41238b24ebeb00866fdc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in development-antares-cosmogenic-enceladus (npm)

The package development-antares-cosmogenic-enceladus was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in dendrochronology-cosmogenic-ablation-protractor (npm)

The package dendrochronology-cosmogenic-ablation-protractor was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cosmogenic-petrology-sagitta-heka (npm)

The package cosmogenic-petrology-sagitta-heka was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cosmogenic-polaris-helios-atlas (npm)

Source: amazon-inspector f3e6d3451b4d5f0da4f77046ec49acbcbb8bd9dd42f04cc2a46ade4250da3b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cosmogenic-karma-wormhole-wasat (npm)

The package cosmogenic-karma-wormhole-wasat was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in cosmogenic-astroinformatics-mesosphere-soap (npm)

Source: amazon-inspector 51f5567535a8c7e5a16a20da17662eb0990505e3a08147a910886879f3674c79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cosmogenic-genomics-scripts-cache (npm)

Source: amazon-inspector ede3ff97afc807cd5b2f66f1660a934b572b18c219fc1b17e91ba7f10e09e5b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in cosmogenic-spinner-andromeda-quasarjet (npm)

Source: amazon-inspector 3192e1b1356672c3cd9c2ed6782552c38b1e7b45566fb986f074c3a22823a61b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in convict-writable-webpack-cosmogenic (npm)

Source: amazon-inspector d97564ab9fc4db43f4230b9d93ccc412d62ff1b73b25e6ee7eeca8c3f4298df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in convict-axios-cosmogenic-miranda (npm)

Source: amazon-inspector 699479996c8d027d40da1208f7afdeaf9a940ada10a45ce700f370a485dd9203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in canopus-cosmogenic-dysonswarm-elektra (npm)

The package canopus-cosmogenic-dysonswarm-elektra was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in augmentedreality-vega-chai-cosmogenic (npm)

Source: amazon-inspector bf9a20ca3eecb8f7b255ef5dd875b8d3a8cc3efd66543789eae137aa9f0f5837 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in convict-writable-webpack-cosmogenic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d97564ab9fc4db43f4230b9d93ccc412d62ff1b73b25e6ee7eeca8c3f4298df7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176113

Malicious code in supernova-cosmogenic-buffer-bioinformatics npm...

EUVD-2025-179529

Malicious code in cosmogenic-spinner-andromeda-quasarjet npm...

EUVD-2025-177376

Malicious code in paleoclimatology-cosmogenic-crust-kardashevscale npm...

Malicious code in nova-relay-cosmogenic-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56dbaefb01969fdf64e8ec7433f6d512ba321800652f1879c013d3f2c5099635 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...