EUVD-2025-177412

Malicious code in orbit-zenith-magellan-antares npm...

EUVD-2025-177975

Malicious code in magellan-vega-phoenix-hydrogeology npm...

EUVD-2025-177399

Malicious code in oscillation-grunt-magellan-dorado npm...

Malicious code in orbit-zenith-magellan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea800d34eda6ec15db396e27410644077e675f01e4972c0dff9cda67740ff49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180501

Malicious code in adonis-prettier-stylelint-ignite-magellan npm...

EUVD-2025-179363

Malicious code in deimos-polaris-gridsome-magellan npm...

EUVD-2025-179858

Malicious code in castor-magellan-halley-equinox npm...

MAL-2025-187896 Malicious code in magellan-astro-webdriverio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956002abb27a2f289c68e054e9fd9ee1991e2691200e686d03be1ff32801893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

EUVD-2025-175981

Malicious code in testcafe-chalk-magellan-figures npm...

EUVD-2025-177982

Malicious code in magellan-enif-oauth-sirius npm...

EUVD-2025-177758

Malicious code in morgan-magellan-public-envconfig npm...

EUVD-2025-179487

Malicious code in cryonics-magellan-bionics-tardigrade npm...

Malicious code in vuepress-toml-magellan-rimraf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d73486af759f7bf45f85de2534aee0ca48048d4c03aafacd5b532d679496ef3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176157

Malicious code in sublimation-sadr-magellan-sqlite npm...

EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-177435

Malicious code in ophiuchus-yonder-magellan-remark npm...

EUVD-2025-176881

Malicious code in quantum-computing-ceres-robotics-magellan npm...