EUVD-2025-112500

Malicious code in init-antares-deneb-orbit npm...

EUVD-2025-121570

Malicious code in subscription-fetch-orbit-hermes npm...

EUVD-2025-112128

Malicious code in json-umbriel-orbit-europa npm...

EUVD-2025-122326

Malicious code in sagitta-express-reveal-md-orbit npm...

Malicious code in orbit-hydra-test-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c07e9826c7bcfe2f3fba90971dfc109aa47a799c8079f02becdfdaea244b9e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145659 Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124014

Malicious code in orbit-hydra-test-venus npm...

EUVD-2025-113063

Malicious code in gridsome-orbit-sqlite-redis npm...

EUVD-2025-124011

Malicious code in orbit-odin-browserify-nightwatch npm...

Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116381

Malicious code in auth-equinox-orbit-charon npm...

EUVD-2025-124018

Malicious code in orbit-command-geckodriver-ini npm...

Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120983

Malicious code in umbriel-orbit-firebase-vuepress npm...

EUVD-2025-112884

Malicious code in helios-configstore-orbit-meteor npm...

EUVD-2025-116364

Malicious code in auth0-bellatrix-orbit-eris npm...

EUVD-2025-115614

Malicious code in castor-rest-orbit-xml npm...

EUVD-2025-113537

Malicious code in forever-tailwindcss-orbit-element-ui npm...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...