EUVD-2025-122489

Malicious code in rigel-lint-orbit-spica npm...

EUVD-2025-121304

Malicious code in tethys-mongodb-orbit-nconf npm...

EUVD-2025-116130

Malicious code in betelgeuse-carina-orbit-dotenv npm...

Malicious code in lint-staged-mutation-orbit-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3c9aeaa19579be18420287582995f1bdcc81002b80c09f383588846803e280a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pulsar-orbit-capella-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bdca590ad06adc6837f3786b26dd80e42dac494df369de6e0a72cf115db638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114125

Malicious code in element-ui-venus-avior-orbit npm...

Malicious code in virgo-quasar-orbit-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e18a6e8300a181852e113ff2fc98e322083e63a46937effefc962720baaa0258 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111130

Malicious code in mini-css-extract-plugin-orbit-meissa-cluster npm...

EUVD-2025-120856

Malicious code in ursa-sass-loader-orbit-async npm...

EUVD-2025-122658

Malicious code in repository-dotenv-safe-xanthus-orbit npm...

EUVD-2025-124005

Malicious code in orbit-uglify-js-jsonp-jekyll npm...

EUVD-2025-115456

Malicious code in chalk-orbit-dynamo-cosmiconfig npm...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

Malicious code in loopback-puppeteer-orbit-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dfb39e2620d3390231bb1f11d856b5d83153e0517c509f97d497defe7de83a26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120974

Malicious code in uninstall-comet-orbit-oauth npm...

Malicious code in blitz-pegasus-convict-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9efd04657104cfac73c4bf700c254831335ec418854cb990760a41449745b98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-xanthus-apollo-private (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 924c714b8a65d6204a62110d0e88de54f38146b9a5979c8a228f0cbfb5b016e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111502

Malicious code in lyra-leda-css-loader-orbit npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

Malicious code in odin-loop-orbit-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...