EUVD-2025-124374

Malicious code in node-sass-magellan-mongodb-auth0 npm...

EUVD-2025-116123

Malicious code in betelgeuse-exec-update-magellan npm...

EUVD-2025-123505

Malicious code in postcss-magellan-ursa-zenobia npm...

EUVD-2025-111469

Malicious code in magellan-markdownlint-concurrently-wasat npm...

EUVD-2025-111440

Malicious code in magellan-webpack-global-vortex npm...

EUVD-2025-111438

Malicious code in magellan-yonder-library-miranda npm...

EUVD-2025-111495

Malicious code in magellan-algol-websockets-commitlint npm...

EUVD-2025-120769

Malicious code in virgo-levels-magellan-nashira npm...

EUVD-2025-123129

Malicious code in publish-magellan-gridsome-bellatrix npm...

EUVD-2025-112222

Malicious code in javascript-stop-solis-magellan npm...

EUVD-2025-111477

Malicious code in magellan-graphql-levels-inquirer npm...

EUVD-2025-112082

Malicious code in juno-magellan-acamar-karma npm...

EUVD-2025-120391

Malicious code in wolf-carina-magellan-equinox npm...

MAL-2025-148325 Malicious code in stream-magellan-gemini-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bcc1a5821362da55f8fdc0cde30e4181ec5f14528ba675a4d31bd8448ac96cf8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141547 Malicious code in deneb-magellan-triton-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 757bc1688c339f1ec8ba8edc984059299631fa611e743caa9abda899688a70c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144573 Malicious code in luna-nightwatch-pegasus-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ab6ea5a396a6500f417c6d9ecb7bb5989b853bcddffe2bdc20f3e8bd6592c9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147250 Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145290 Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144633 Malicious code in magellan-elara-galaxy-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ecc1f280efec6e223c5ae6de10a1150bed55d41918ceafc38f2c3c28c88a36b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...