MAL-2025-142707 Malicious code in frontend-magellan-metalsmith-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfaded5a35d94f132a6c8896414ddf1d3d52e9a23f4b571443e2689ecd34e447 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148443 Malicious code in tailwindcss-helios-magellan-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cbe3100900f2c9509fc6f154b180c84405648bb95b758aa7ea544adf22ad91f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112809

Malicious code in hermes-callback-equinox-magellan npm...

Malicious code in nightwatch-vega-pm2-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9721711530d3774701e2dbb09bc46c5e32016b8e64cfb20ad8261d43bf4fa1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111418

Malicious code in markdown-pdf-nebula-ursa-magellan npm...

EUVD-2025-121485

Malicious code in tailwindcss-helios-magellan-blaze npm...

EUVD-2025-111484

Malicious code in magellan-deneb-schema-soap npm...

EUVD-2025-114882

Malicious code in cressida-cygnus-chariklo-magellan npm...

EUVD-2025-113454

Malicious code in fornax-umbriel-magellan-graphql npm...

EUVD-2025-124870

Malicious code in miranda-polaris-async-magellan npm...

EUVD-2025-122672

Malicious code in remark-magellan-init-envconfig npm...

EUVD-2025-112413

Malicious code in io-magellan-passport-kinetic npm...

EUVD-2025-120967

Malicious code in uninstall-magellan-enif-nashira npm...

Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114562

Malicious code in deneb-magellan-triton-indus npm...

Malicious code in achernar-magellan-server-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f2acec02551e19c519fb08429a857027f87ac2d9ae888c056fe99dc5cc9e05 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111453

Malicious code in magellan-sedna-mysql-rimraf npm...

MAL-2025-144648 Malicious code in magellan-meissa-oauth-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4147b208943baf94596cf907bc52cb7fb8253b2b9fbb50010a1dc78ab9237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144624 Malicious code in magellan-blitz-atlas-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2340dbf5fc23d6a3011d549871d854a58569177ed1163b8a7fe224213778d119 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144665 Malicious code in magellan-slides-terser-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcf12d647556ec1a189a342de9119f3bb7327fd345626738d7f4c030458798 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...