EUVD-2025-179243

Malicious code in draco-gacrux-carpo-await npm...

Malicious code in cosmos-framework-gacrux-pm2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cd2a9d5b7263324033c43fd921ffc4f87609c2d056fd9ab0813eb4da595dcfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178798

Malicious code in gacrux-magellan-cluster-version npm...

EUVD-2025-178801

Malicious code in gacrux-dorado-impulse-test npm...

EUVD-2025-177810

Malicious code in miranda-gacrux-stratigraphy-node-sass npm...

MAL-2025-187080 Malicious code in gacrux-betelgeuse-package-webdriver-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6169441db67c1ad514453675544949307be78e6e2a8931aecea6222e243212c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179406

Malicious code in dagda-technocracy-commitlint-gacrux npm...

EUVD-2025-178797

Malicious code in gacrux-supercluster-superposition-fomalhaut npm...

EUVD-2025-179038

Malicious code in eslint-plugin-gacrux-wolf-ariel npm...

EUVD-2025-175829

Malicious code in umbriel-kastra-gacrux-google npm...

MAL-2025-188795 Malicious code in prettier-despina-gacrux-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 00fec6deb30bd5cd5a5e545dce825592415f1f20a4686a084e6cb1c5169e3902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187081 Malicious code in gacrux-dorado-impulse-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c65b3ff1c02ec4218b6d3cfd1acef8705073c0a75768296613710e6fd716088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178734

Malicious code in genomics-paleoclimatology-aldebaran-gacrux npm...

EUVD-2025-178802

Malicious code in gacrux-betelgeuse-package-webdriver-manager npm...

EUVD-2025-178748

Malicious code in gemini-csv-gacrux-andromeda npm...

EUVD-2025-180307

Malicious code in asthenosphere-auth-andromeda-gacrux npm...

EUVD-2025-178800

Malicious code in gacrux-farout-publish-barnard npm...

EUVD-2025-176937

Malicious code in public-gacrux-jsonp-sirius npm...

EUVD-2025-177080

Malicious code in prettier-despina-gacrux-shelljs npm...

MAL-2025-186476 Malicious code in dagda-technocracy-commitlint-gacrux (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a5d983e33879369dd931cad741e8149906dfd91e5b8a8b102b534b4b2cea15f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...