MAL-2025-141726 Malicious code in dotenv-parse-variables-module-oauth-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38a7e6b95515a31d1233ebba86b161e09735889427de239e0a45d6000fe29d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142421 Malicious code in farout-pm2-magellan-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f979d60e9f0321430741732ee1d0db5bcbeb4f5bea123aecf96de18fd502645 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144633 Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141110 Malicious code in cordelia-sirius-markdownlint-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bf7ac8e53cfb963f4716c2a371204c3055919800eccfbb8b4992bc33d0147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120469

Malicious code in wezen-magellan-cassini-auth npm...

Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc85defb5c47d81a6b7152dddb64836d50ee11205bac70928844a4534b6d9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123161

Malicious code in public-magellan-elektra-dotenv npm...

EUVD-2025-120769

Malicious code in virgo-levels-magellan-nashira npm...

EUVD-2025-114032

Malicious code in envconfig-magellan-magellan-eslint npm...

EUVD-2025-114562

Malicious code in deneb-magellan-triton-indus npm...

EUVD-2025-122621

Malicious code in request-magellan-nashira-jsonp npm...

EUVD-2025-123423

Malicious code in prettier-plugin-markdown-xml-ursa-magellan npm...

EUVD-2025-111452

Malicious code in magellan-sedna-warp-cors npm...

EUVD-2025-112090

Malicious code in juno-dactyl-spectron-webdriver-magellan npm...

Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...