EUVD-2025-178697

Malicious code in global-rollup-plugin-lightyear-thermochronology npm...

EUVD-2025-180300

Malicious code in astrobiology-andromeda-lightyear-astrometry npm...

EUVD-2025-176827

Malicious code in quito-config-lightyear-quito npm...

EUVD-2025-177674

Malicious code in nebula-outercore-promise-lightyear npm...

EUVD-2025-175839

Malicious code in umbra-enif-sirius-lightyear npm...

EUVD-2025-178096

Malicious code in lightyear-ichnology-transform-phoebe npm...

EUVD-2025-179314

Malicious code in despina-lightyear-yakutsk-jwt npm...

EUVD-2025-179146

Malicious code in enceladus-quantumfoam-markdownlint-lightyear npm...

EUVD-2025-178863

Malicious code in fork-lightyear-commitlint-unuk npm...

Malicious code in rest-lightyear-mensa-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 899e37ba29ad589e48403c2bd57f0465349f7d19e4ee0ae2c3d60c2868ce9e85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176291

Malicious code in solarnebula-browserify-lightyear-nextjs npm...

MAL-2025-188489 Malicious code in outercore-sync-fornax-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9e2e853eda7b0af152340f61eb4696e8f76559b416699655d34aa888bfc5f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in umbra-enif-sirius-lightyear (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1d6e28e0423c02db3969a8742d5aa784afb117a4d8361b30eaf8032885dbdd8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178097

Malicious code in lightyear-cors-quasar-procyon npm...

EUVD-2025-178736

Malicious code in genomics-lightyear-mesosphere-wolf npm...

EUVD-2025-178667

Malicious code in gravity-cosmology-lightyear-inquirer npm...

EUVD-2025-179330

Malicious code in deneb-terser-webpack-plugin-lightyear-enceladus npm...

EUVD-2025-177213

Malicious code in phoebe-coronalmassejection-lightyear-jupiter npm...

EUVD-2025-179119

Malicious code in entanglement-xanthus-lithosphere-lightyear npm...

MAL-2025-187215 Malicious code in gravity-cosmology-lightyear-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0821bef28486dae7727261c5a952106286fcb1f54501b2f0569591e12d76461 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...