EUVD-2025-123377

Malicious code in process-airbnb-ophiuchus-galaxy npm...

EUVD-2025-111749

Malicious code in levels-sync-galaxy-inquirer npm...

Malicious code in karma-galaxy-proxima-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9112f00b5571a200feea2b0e349052f65ea550e990ee66858706ef898b5833c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114666

Malicious code in dactyl-galaxy-quasar-uglify-js npm...

EUVD-2025-121609

Malicious code in stream-galaxy-loopback-rocket npm...

EUVD-2025-113958

Malicious code in eridanus-miranda-cors-galaxy npm...

EUVD-2025-113317

Malicious code in galaxy-virgo-reveal-md-ophiuchus npm...

EUVD-2025-121315

Malicious code in tethys-commitlint-galaxy-bellatrix npm...

MAL-2025-147212 Malicious code in relay-wezen-procyon-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82056215e83fbf50098a0c0cd3af13d16c18accb98e2b5be855c8327e02798a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113326

Malicious code in galaxy-bulma-xo-halley npm...

MAL-2025-142786 Malicious code in galaxy-bulma-xo-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a2af6b2e3df23281628418462d1f455c10e7b7c6a8a9eb87057cbb7bdf9bd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142793 Malicious code in galaxy-nodejs-ultra-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59f3668b7d034cfc50c80bd3571e04523f59d1da1eb4392fdf1be9e724ce1663 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142232 Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139444 Malicious code in antares-uglify-js-child-process-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 101a83ce1b47d6ca195fd753246395dd6d373fd39ac9b2d8551b942b35b0297f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144924 Malicious code in meteor-postcss-galaxy-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5baa599df8327e1b0ad8e16250d1ace51cc18e05fdcea42dc67da326bfb9383c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146639 Malicious code in promise-galaxy-express-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d73f608b623f0b3a98949eacc4b35515f0f7ef184928ce7a965fbc14ebff47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113519

Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin npm...

EUVD-2025-115510

Malicious code in chai-luna-sagitta-galaxy npm...

EUVD-2025-122753

Malicious code in rehype-galaxy-hydra-prettier-plugin-markdown npm...

Malicious code in local-galaxy-css-loader-chariklo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62c5d995b2d7c1379c608222f6a930f1dd0abf83465e12d9acd14b9ec66aedfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...