EUVD-2025-113406

Malicious code in frontend-jupiter-writable-dagda npm...

EUVD-2025-116115

Malicious code in betelgeuse-jupiter-zenith-mocha npm...

EUVD-2025-111473

Malicious code in magellan-jupiter-jupiter-iota npm...

EUVD-2025-112066

Malicious code in jupiter-altair-sagitta-leda npm...

EUVD-2025-123737

Malicious code in phoebe-style-loader-cli-jupiter npm...

EUVD-2025-123425

Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel npm...

Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112064

Malicious code in jupiter-ariel-start-janus npm...

EUVD-2025-120197

Malicious code in xml-relay-jupiter-ultra npm...

Malicious code in alphard-jupiter-yonder-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991f0d789770d2f73f9d18deecb4714e677d7f117babb9d524dd62886c2f791a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116774

Malicious code in alphard-jupiter-yonder-gravity npm...

EUVD-2025-115807

Malicious code in callback-jupiter-indus-procyon npm...

EUVD-2025-114204

Malicious code in electron-builder-jupiter-markdown-schema npm...

MAL-2025-142515 Malicious code in firebase-server-miranda-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector beb4a7fb178cd7eadc112d909aa87f187fb04dd8148d9afd9a0ff5227a5d61e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142631 Malicious code in fornax-loglevel-xanadu-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f4564c10a88dbb40742a117cd51e90da16d563a33c2464c01b686df5490cb33 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139417 Malicious code in antares-jupiter-upgrade-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c0743336e3ae92ad5c0414f0d4f6025343f6a1c877fa69ce7ba4305bca27db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144066 Malicious code in jupiter-wasat-blitz-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9636ce05fea538ac7059065ef9729dccfdc9cbf9fce39f7ae482e360c11bbc60 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139816 Malicious code in await-xanadu-jupiter-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd2f1c79ed3156189c294271f1e96c1d453e72ef5d6750d32043e80fb3f9a866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144062 Malicious code in jupiter-quito-library-slidev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0f31a2270851934c119eaeed10d434d7e124cca135839712f2f84ad56a3b3d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...