EUVD-2025-124238

Malicious code in npm-magellan-commitlint-vuepress npm...

EUVD-2025-111489

Malicious code in magellan-callisto-eridanus-ophiuchus npm...

EUVD-2025-123129

Malicious code in publish-magellan-gridsome-bellatrix npm...

EUVD-2025-112413

Malicious code in io-magellan-passport-kinetic npm...

EUVD-2025-124692

Malicious code in mutation-meteor-magellan-deneb npm...

EUVD-2025-111468

Malicious code in magellan-meissa-mini-css-extract-plugin-dorado npm...

EUVD-2025-111445

Malicious code in magellan-tool-materialize-oauth npm...

EUVD-2025-112243

Malicious code in jasmine-ultra-magellan-cressida npm...

Malicious code in mensa-enif-magellan-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b533e0ae285e04abc18553b4bf644ea798de190bdc453f5ebba48f4bab21c97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122053

Malicious code in sequelize-grunt-public-magellan npm...

EUVD-2025-121173

Malicious code in tool-stop-magellan-jekyll npm...

EUVD-2025-111466

Malicious code in magellan-middleware-protractor-postcss-loader npm...

EUVD-2025-111490

Malicious code in magellan-cache-backend-halley npm...

EUVD-2025-114177

Malicious code in electron-soap-magellan-heka npm...

MAL-2025-149684 Malicious code in xenos-magellan-callback-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8bf51ef45ec0700ded4e3016233d1505c657e69a98f407700b41894c37d3d34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147250 Malicious code in remark-magellan-init-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afc202011ab34d0dbcae049b25c37ee9bb257b42f38b751c9ea4f656fa99a47d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144652 Malicious code in magellan-module-apex-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 59e15094c400bb1335ee8b3f89fdebe6f60119b6f341686a2399533da98c0340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141478 Malicious code in dagda-nodejs-magellan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144672 Malicious code in magellan-update-config-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e022d5f7a1ea9234ca46dc22df14140afb67de5bdabe0b2e912b051cfd9228 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-magellan-csv-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...