EUVD-2025-122743

Malicious code in rehype-orbit-yildun-dependencies npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

Malicious code in phoebe-orbit-redis-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 957cfc765b8daa82d4a320788625032a8cc33b88ebf52723fcb105fbac1146fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121132

Malicious code in transport-playwright-zenobia-orbit npm...

EUVD-2025-113931

Malicious code in eris-postcss-meissa-orbit npm...

Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in atlas-orbit-ceres-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 390c71dca69fcf971784d38898462de4be130994baa7d5fd5e56e0f303736b1a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121407

Malicious code in terser-google-sedna-orbit npm...

Malicious code in orbit-native-dotenv-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6466a7c07bc1e387c14393082dadb8434498342d6dacaa0eedd9b3b5050c4566 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124007

Malicious code in orbit-transport-pulsar-fornax npm...

EUVD-2025-122645

Malicious code in repository-orbit-scripts-kastra npm...

EUVD-2025-116462

Malicious code in atlas-browserify-commitlint-orbit npm...

EUVD-2025-120498

Malicious code in weywot-achernar-orbit-node-sass npm...

EUVD-2025-124006

Malicious code in orbit-triton-request-andromeda npm...

Malicious code in semantic-ui-global-orbit-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ff00da8a18770fad505f5af64be0dda74e2e3a6e3210f93b59c825b25e84dfe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120416

Malicious code in winston-nestjs-style-loader-orbit npm...

EUVD-2025-124262

Malicious code in nova-fornax-pegasus-orbit npm...

EUVD-2025-121691

Malicious code in sqlite-orbit-xenos-heka npm...

EUVD-2025-123753

Malicious code in phoebe-orbit-redis-javascript npm...