EUVD-2025-111488

Malicious code in magellan-cli-despina-xerxes npm...

EUVD-2025-112809

Malicious code in hermes-callback-equinox-magellan npm...

EUVD-2025-116019

Malicious code in bootes-magellan-yakutsk-spawn npm...

EUVD-2025-113018

Malicious code in grus-magellan-typeorm-jest npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-111495

Malicious code in magellan-algol-websockets-commitlint npm...

EUVD-2025-113776

Malicious code in exec-algol-magellan-nashira npm...

EUVD-2025-123027

Malicious code in quantum-avior-chalk-magellan npm...

Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114882

Malicious code in cressida-cygnus-chariklo-magellan npm...

EUVD-2025-112034

Malicious code in jwt-magellan-sedna-stop npm...

EUVD-2025-123375

Malicious code in process-convict-auriga-magellan npm...

EUVD-2025-124619

Malicious code in nconf-airbnb-draco-magellan npm...

EUVD-2025-114633

Malicious code in dagda-magellan-cosmiconfig-forever npm...

Malicious code in magellan-auth0-markdownlint-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4110e4c3e1416d8249708d1df17172ba965f24d7fbe642c942883e8c886adc2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-janus-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef7173d4aadc73cc2abb8592799f4e82a48e637f593e78b5e8f51a5107f7e5d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116902

Malicious code in achernar-hyperion-magellan-helios npm...

EUVD-2025-116051

Malicious code in blitz-magellan-betelgeuse-equinox npm...

EUVD-2025-121185

Malicious code in tool-magellan-weywot-superagent npm...

MAL-2025-144669 Malicious code in magellan-toml-pyxis-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc6dc533b7eafd1a447732d5171a98cc252177054638dda40dfda403bdeecec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...