EUVD-2025-177707

Malicious code in native-callback-prettier-magellan npm...

EUVD-2025-176157

Malicious code in sublimation-sadr-magellan-sqlite npm...

EUVD-2025-179363

Malicious code in deimos-polaris-gridsome-magellan npm...

EUVD-2025-179267

Malicious code in dotenv-parse-variables-astrobiology-readable-magellan npm...

EUVD-2025-179646

Malicious code in command-react-bootstrap-neuromorphic-magellan npm...

EUVD-2025-178241

Malicious code in jupiter-fork-axios-magellan npm...

EUVD-2025-177975

Malicious code in magellan-vega-phoenix-hydrogeology npm...

EUVD-2025-176925

Malicious code in publish-magellan-loop-puppeteer npm...

Malicious code in orbit-zenith-magellan-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ea800d34eda6ec15db396e27410644077e675f01e4972c0dff9cda67740ff49 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177986

Malicious code in magellan-astro-webdriverio-enceladus npm...

MAL-2025-187902 Malicious code in magellan-gammarayburst-passport-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af4ae1a2fe9cec34c0b28482fc1ad0e92f4279cf6167f43e0c372d9c6b17f58f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186024 Malicious code in castor-magellan-halley-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f91c2d58b576b6b398598b006ff7330ccf27b074f3ba12ea2377ed20fee56b1f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177976

Malicious code in magellan-transport-auth0-pulsar npm...

EUVD-2025-180343

Malicious code in arcturus-magellan-bellatrix-quasarjet npm...

EUVD-2025-178833

Malicious code in framework-umbriel-mongoose-magellan npm...

MAL-2025-185545 Malicious code in arcturus-magellan-bellatrix-quasarjet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85706cbfd581fad81dabf70d7a7a10ae9b714ca2c7b392c8337518cb0800d8e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187896 Malicious code in magellan-astro-webdriverio-enceladus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 956002abb27a2f289c68e054e9fd9ee1991e2691200e686d03be1ff32801893e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187869 Malicious code in loopback-magellan-foundation-csrf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f9be3358b5196be685222ab977cbc9e55f402b2b9a88a7ef872d91c7115e53f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185952 Malicious code in bunyan-spectron-webdriver-less-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea996c13b6b5a184710be958777615f73170e5e8f3a5e8fb00260064a7d769c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120967

Malicious code in uninstall-magellan-enif-nashira npm...