EUVD-2025-124148

Malicious code in octans-juno-magellan-rigel npm...

EUVD-2025-114745

Malicious code in cygnus-cache-magellan-run-script npm...

EUVD-2025-111559

Malicious code in loopback-local-phoenix-magellan npm...

EUVD-2025-111267

Malicious code in mensa-enif-magellan-umbriel npm...

EUVD-2025-111481

Malicious code in magellan-flare-duplex-izar npm...

EUVD-2025-123138

Malicious code in publish-ganymede-magellan-dione npm...

EUVD-2025-123824

Malicious code in perseus-magellan-cosmiconfig-concurrently npm...

EUVD-2025-122417

Malicious code in rollup-nova-inquirer-magellan npm...

EUVD-2025-122053

Malicious code in sequelize-grunt-public-magellan npm...

EUVD-2025-124692

Malicious code in mutation-meteor-magellan-deneb npm...

Malicious code in spica-magellan-css-loader-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d8f507c0238aa2b70a6d45190da561364316f170d18e907d2595af4d14721e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantum-avior-chalk-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0f584f924e5c41aa42e62acfca99d304acbddc6aa037c0b9c9d47e19e28012d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123735

Malicious code in phoebe-vuepress-magellan-spectron npm...

EUVD-2025-116270

Malicious code in axios-karma-mensa-magellan npm...

EUVD-2025-113967

Malicious code in eridanus-enif-magellan-electron npm...

EUVD-2025-122248

Malicious code in sass-loader-magellan-build-reveal-md npm...

EUVD-2025-114633

Malicious code in dagda-magellan-cosmiconfig-forever npm...

EUVD-2025-122383

Malicious code in run-script-bulma-jupiter-magellan npm...