Malicious code in gravity-sadr-uninstall-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6c9d8976e1d73cf0d12e60f81cef1c9e6aa3b1a3299233311e4f1f37ab133c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120032

Malicious code in zephyr-zenith-configstore-gravity npm...

EUVD-2025-112302

Malicious code in janus-gravity-npm-proxima npm...

EUVD-2025-113094

Malicious code in gravity-bellatrix-farout-magellan npm...

EUVD-2025-113086

Malicious code in gravity-gridsome-equinox-playwright npm...

EUVD-2025-111705

Malicious code in link-gravity-css-loader-arcturus npm...

Malicious code in gravity-chariklo-library-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 760633396d9626e1446ca9c941b2341fd8bf903b955e6bd238487ca4d258e29c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123777

Malicious code in phoebe-centaurus-pipe-gravity npm...

Malicious code in gravity-centauri-docusaurus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6888c4ce290373de142d4cf67f685e39935cd011f692270694a1c042724e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122209

Malicious code in scorpius-puppeteer-gravity-webdriverio npm...

EUVD-2025-113085

Malicious code in gravity-jabbah-magellan-zephyr npm...

EUVD-2025-113745

Malicious code in express-antares-neptune-gravity npm...

EUVD-2025-112097

Malicious code in juno-antares-gravity-prompts npm...

EUVD-2025-113091

Malicious code in gravity-chariklo-library-rimraf npm...

EUVD-2025-124732

Malicious code in morgan-regulus-xenon-gravity npm...

Malicious code in regulus-loopback-gravity-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e2e33d869936b58fdbe291e2439f8c32c80eef4c3f563b534efb78ad4bc3f95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

EUVD-2025-115525

Malicious code in chai-antares-gravity-eslint-config npm...

EUVD-2025-116722

Malicious code in andromeda-octans-gravity-electron-builder npm...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...