EUVD-2025-124014

Malicious code in orbit-hydra-test-venus npm...

EUVD-2025-124005

Malicious code in orbit-uglify-js-jsonp-jekyll npm...

EUVD-2025-124006

Malicious code in orbit-triton-request-andromeda npm...

EUVD-2025-113063

Malicious code in gridsome-orbit-sqlite-redis npm...

EUVD-2025-121132

Malicious code in transport-playwright-zenobia-orbit npm...

Malicious code in orbit-bellatrix-titan-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a567f1ed8455c1488e6bc4ec30bfc6f16a9ce9fad068780f75d21a0924f3c6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124008

Malicious code in orbit-thuban-child-process-writable npm...

EUVD-2025-122474

Malicious code in rimraf-dagda-sass-loader-orbit npm...

EUVD-2025-124013

Malicious code in orbit-markdown-pdf-octans-convict npm...

Malicious code in subscription-fetch-orbit-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c4539a564bbc6f484d4f38280cfc4f3a247f08e4598c2bbebdb3b9d9d028bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

EUVD-2025-111408

Malicious code in markdown-pdf-rimraf-kronos-orbit npm...

MAL-2025-140493 Malicious code in castor-rest-orbit-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 829f11bce1bd5202c40fe72edba2aeca19e4d77af75efa888c3d72fbdcb49c07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141730 Malicious code in dotenv-parse-variables-orbit-relay-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3849b9c397f74c9e85f87562ef0a98745cf80f49f5851e6d031b90923f5547 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146228 Malicious code in pino-orbit-bootes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6c0a0cf85e2aa9ff42e45b52e8713bd5642d193b196ea160f5a6de1de04689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121247

Malicious code in titan-janus-celeste-orbit npm...

MAL-2025-145920 Malicious code in orbit-xml-nightwatch-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70a3f62aee87ee36ab9ad55455abe4b9e4f611eec1f01293cd9ecf65ddebba0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142179 Malicious code in eris-postcss-meissa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d27bcabfaaa9e19e794765c57eb2a14c626c0f10f9a9c0753116c47fdae89bc5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148796 Malicious code in transport-playwright-zenobia-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c79d7663c95b031b90b984412a77e6cb307fbbbfbd3f9cb51a1ef7206d484b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...