EUVD-2025-114226

Malicious code in elara-miranda-loglevel-magellan npm...

Malicious code in geckodriver-magellan-csv-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111485

Malicious code in magellan-cross-env-fornax-firebase npm...

Malicious code in magellan-meissa-oauth-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4147b208943baf94596cf907bc52cb7fb8253b2b9fbb50010a1dc78ab9237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114305

Malicious code in duplex-browserify-magellan-fork npm...

Malicious code in subscription-octans-toml-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7502f2a664297099ddcd766a544f97f3b53507614a99839cbf6eb44527def5cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111491

Malicious code in magellan-blitz-atlas-child-process npm...

EUVD-2025-111488

Malicious code in magellan-cli-despina-xerxes npm...

Malicious code in magellan-slides-terser-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcf12d647556ec1a189a342de9119f3bb7327fd345626738d7f4c030458798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124148

Malicious code in octans-juno-magellan-rigel npm...

EUVD-2025-114745

Malicious code in cygnus-cache-magellan-run-script npm...

EUVD-2025-111559

Malicious code in loopback-local-phoenix-magellan npm...

EUVD-2025-111267

Malicious code in mensa-enif-magellan-umbriel npm...

EUVD-2025-111481

Malicious code in magellan-flare-duplex-izar npm...

EUVD-2025-123138

Malicious code in publish-ganymede-magellan-dione npm...

EUVD-2025-123824

Malicious code in perseus-magellan-cosmiconfig-concurrently npm...

EUVD-2025-122417

Malicious code in rollup-nova-inquirer-magellan npm...

EUVD-2025-122053

Malicious code in sequelize-grunt-public-magellan npm...

EUVD-2025-124692

Malicious code in mutation-meteor-magellan-deneb npm...

Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...