EUVD-2025-113085

Malicious code in gravity-jabbah-magellan-zephyr npm...

EUVD-2025-111476

Malicious code in magellan-gravity-rehype-proxima npm...

MAL-2025-141478 Malicious code in dagda-nodejs-magellan-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 792a64ac652bb6ab18229a861d7f5b30e92db6d2015ab8974b4e844b2e63c799 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147502 Malicious code in rollup-magellan-hapi-puppeteer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3490d9c59832ca44c7885eff71bfbba3bba091d61f91ffd6962dbd3829a1f92c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142685 Malicious code in framework-magellan-mocha-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 134d8b8ad0a608d770da2b282ea99ddaa6fcb5459a7eea6743382b9852548bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143018 Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144641 Malicious code in magellan-ignite-dotenv-safe-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b9509a124dfe93788f19cc61f45b7cb85f641b264d55e836996ab23ec7aa81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141110 Malicious code in cordelia-sirius-markdownlint-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d75bf7ac8e53cfb963f4716c2a371204c3055919800eccfbb8b4992bc33d0147 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144649 Malicious code in magellan-middleware-protractor-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 930bcf903d4874e22b6b79a00b1cc2c3a1fbb30b21d8d457777e38c1fb17f539 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114871

Malicious code in cressida-mocha-magellan-oberon npm...

EUVD-2025-111457

Malicious code in magellan-protractor-wasat-wezen npm...

MAL-2025-139979 Malicious code in betelgeuse-exec-update-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e555950e15a7e2b4e020ff7b30c178cb7e9d44c348eb8310e6831db7125e83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144666 Malicious code in magellan-socketio-selenium-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf933be15affa16c42b96fa0e29f1a2c2c0881cae59ad41399426bd890d1c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141267 Malicious code in cross-env-request-markdown-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dac399a914c58ef29195046b374c25f58ed3f7b5a0f5be57f42cc767e194bd5c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140083 Malicious code in bootes-magellan-yakutsk-spawn (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66d9eed43e2a4dae5f0ed3a05e412b53eb3228b4172ed85073a6b50778c948eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145547 Malicious code in node-sass-magellan-mongodb-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5219e3fb0d56abde1dc3b799139abbef4f1eb1b65d940883d6bf200f233d4364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144654 Malicious code in magellan-nodejs-upgrade-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7a287064aebd8dc02a43ccaea9def800416fdf41787c254c715a4c63df047f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141804 Malicious code in duplex-browserify-magellan-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7466a01a5be6f74833c766c462326c87f8675e1a5883a6027ac90454c2d797 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149325 Malicious code in webdriver-manager-magellan-install-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8f908817c72e81189c320433f0b18701070c54790ba35cd5de6436e0b750942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144648 Malicious code in magellan-meissa-oauth-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c4147b208943baf94596cf907bc52cb7fb8253b2b9fbb50010a1dc78ab9237e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...