EUVD-2025-112128

Malicious code in json-umbriel-orbit-europa npm...

EUVD-2025-120549

Malicious code in webdriverio-private-orbit-terser-webpack-plugin npm...

EUVD-2025-114180

Malicious code in electron-rimraf-orbit-javascript npm...

EUVD-2025-116147

Malicious code in bellatrix-resolvers-inquirer-orbit npm...

EUVD-2025-113414

Malicious code in frontend-betelgeuse-restart-orbit npm...

EUVD-2025-115200

Malicious code in command-io-gravity-orbit npm...

EUVD-2025-111555

Malicious code in loopback-puppeteer-orbit-configstore npm...

EUVD-2025-114894

Malicious code in cosmos-proxima-luna-orbit npm...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-112377

Malicious code in iota-orbit-sirius-pegasus npm...

Malicious code in orbit-venus-stop-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1edd2da11014ff8bb8f969442d44b52f7b98df08c630c9c20402410bc3722694 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111295

Malicious code in meissa-orbit-bootes-javascript npm...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...

Malicious code in postcss-loader-yakutsk-europa-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3934a796437258dfb3b5a9dc6649a7c7e4471263fae908da9840c57120e65f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113537

Malicious code in forever-tailwindcss-orbit-element-ui npm...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145918 Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...