EUVD-2025-114504

Malicious code in despina-process-scripts-gemini npm...

EUVD-2025-113192

Malicious code in gemini-wolf-subscription-adonis npm...

EUVD-2025-123223

Malicious code in protractor-sass-loader-test-gemini npm...

EUVD-2025-123688

Malicious code in pino-pretty-gemini-blaze-stream npm...

EUVD-2025-121697

Malicious code in sqlite-gemini-procyon-cressida npm...

Malicious code in gemini-arcturus-ursa-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 893be3b51231b52255a0f5407ce3e9f0a9f92aca477fdf3217d160d7864bbd85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114347

Malicious code in dotenv-safe-nconf-gemini-vortex npm...

EUVD-2025-114296

Malicious code in duplex-jsonp-zenobia-gemini npm...

EUVD-2025-114357

Malicious code in dotenv-safe-gemini-spica-materialize npm...

Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123748

Malicious code in phoebe-publish-gemini-kastra npm...

EUVD-2025-124039

Malicious code in ora-eslint-config-gemini-epimetheus npm...

EUVD-2025-114927

Malicious code in cosmiconfig-gemini-wolf-publish npm...

EUVD-2025-114245

Malicious code in elara-betelgeuse-frontend-gemini npm...

EUVD-2025-113194

Malicious code in gemini-server-ini-sagitta npm...

Malicious code in gemini-relay-readable-sadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6153588fa07b05da227571629362574876da36eef3b7b257efd00bf9adc0f53e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121890

Malicious code in soap-spica-gemini-ganymede npm...

EUVD-2025-113221

Malicious code in gemini-arcturus-ursa-sass-loader npm...

MAL-2025-146433 Malicious code in postgres-gemini-acamar-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0277a04b53abf1394a107472a82edec4a8da37c1784fdd09e4fd7fa5017e6a17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141394 Malicious code in cypress-chakra-ui-umbriel-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6da7a0c50622f6f39f61b3b41a7ec2cba924eafff2db61daeb1da12326ecea8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...