EUVD-2025-115573

Malicious code in centauri-orbit-ophiuchus-aether npm...

EUVD-2025-116381

Malicious code in auth-equinox-orbit-charon npm...

MAL-2025-145659 Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145918 Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145903 Malicious code in orbit-command-geckodriver-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e97b739a0c92118c2d9aa0292ccbc802a6043f7e8bd70b043cc3f1cc5df3c628 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145915 Malicious code in orbit-triton-request-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0261ff5b588ea919078250bc8c577b2e6b1e52d783c8bca73c12d506657f70e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122658

Malicious code in repository-dotenv-safe-xanthus-orbit npm...

EUVD-2025-111540

Malicious code in luna-orbit-inquirer-convict npm...

EUVD-2025-115737

Malicious code in canopus-proxima-orbit-query npm...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...

MAL-2025-145912 Malicious code in orbit-reveal-md-charon-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b37b082f09d00efccc10b37d131440a35f6864abbfa175f1808668340ffc905 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149483 Malicious code in winston-cassini-mutation-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401128304cdbf7c072836cf82f8fee13b009ff8a7e027f96937fde57663b0d07 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148945 Malicious code in umbriel-orbit-firebase-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f63d918694d1ec06ca3636e0c9f9bd1adacaa73c740b5a0878601dfcade48b99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121304

Malicious code in tethys-mongodb-orbit-nconf npm...

EUVD-2025-124004

Malicious code in orbit-venus-stop-jovian npm...

Malicious code in orbit-configstore-bellatrix-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84856589e5835a0225179325645e11cec438454e45f4e6c72aa2b05ad6a7d785 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112500

Malicious code in init-antares-deneb-orbit npm...

EUVD-2025-124016

Malicious code in orbit-delphinus-convict-antd npm...

Malicious code in repository-orbit-scripts-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77143559d13fe2d5805ab64cc22bf717f4cbbee31e77b3c0b72bbe442dce8d52 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...