EUVD-2025-122887

Malicious code in rate-limiter-config-galaxy-ophiuchus npm...

Malicious code in galaxy-gulp-socketio-solis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a5145d9682743031b8b7616fe119454d6603e023db328a3b4a5a52e7f22c0a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115835

Malicious code in cache-galaxy-titan-ursa npm...

EUVD-2025-111191

Malicious code in meteor-postcss-galaxy-markdown npm...

EUVD-2025-120140

Malicious code in yaml-html-webpack-plugin-galaxy-babel npm...

Malicious code in gacrux-galaxy-loopback-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe9574eada5f7856d57a924bdfe32e8ebcfe2ef5419865a35394d25b67e09fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120980

Malicious code in umbriel-transform-galaxy-pavo npm...

Malicious code in polaris-galaxy-dione-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fe89b18978b330a37b7d1dbdf56eadbf5e873ddc9b39a4676a80187c71923c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-impulse-galaxy-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 862019025039512d743d8a22f192c01a4be212e4051f80ef7e9fd4891922d583 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in elara-google-auth0-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15389f5580c9c15a58a0408109441fdba6487427ec7c99e16aa04252529901d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114512

Malicious code in despina-galaxy-auth-subscription npm...

EUVD-2025-115423

Malicious code in changelog-slides-update-galaxy npm...

EUVD-2025-112006

Malicious code in karma-galaxy-proxima-bunyan npm...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

Malicious code in morgan-miranda-galaxy-octans (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3918e9f0a59a05864fd4d19ced3d18f6a0a259f723e66779962e8377f9f3738e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-aquarius-mui-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc5a48949c69a045ee791279a04c56a2f449b7a11d0948500b5f1c1dedefea70 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113325

Malicious code in galaxy-centauri-iota-eslint-config npm...

EUVD-2025-114228

Malicious code in elara-lint-staged-ophiuchus-galaxy npm...

Malicious code in config-galaxy-rimraf-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6a20b2aacf8190012ddfbab3217df1639b5da0ac41f048534553bde75653cda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142798 Malicious code in galaxy-websockets-sagitta-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abf514cf442b1880a6a93622c132a8b6c2cfdbd289efe18d9fd1c089bd327233 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...