Malicious code in release-it-nova-orbit-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ab3495ac1d9fef2ffac460dccd2454e48b85c3df2a2fa18a230ee9b876907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179663

Malicious code in comet-orbit-umbriel-thermochronology npm...

EUVD-2025-177413

Malicious code in orbit-typeorm-nucleosynthesis-tectonic npm...

MAL-2025-188469 Malicious code in orbit-typeorm-nucleosynthesis-tectonic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6dd0f8906ebfbf9c904bb008379e1ef26813caad53f6b2009b17913f630de464 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176708

Malicious code in release-it-nova-orbit-figures npm...

MAL-2025-188774 Malicious code in postcss-babel-centauri-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 304c683267f7b701dbc99741dfd9571f4f23ae6cc76d8c453977e8cf968040fb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188630 Malicious code in perseus-orbit-iota-aquarius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ccbfd6e5e96370c38700b129593b52a7d859df25adf5ca593c54da701eec1872 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111879

Malicious code in lacerta-callisto-orbit-umbriel npm...

Malicious code in subscription-fetch-orbit-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1c4539a564bbc6f484d4f38280cfc4f3a247f08e4598c2bbebdb3b9d9d028bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121409

Malicious code in terser-europa-start-orbit npm...

EUVD-2025-113797

Malicious code in event-geckodriver-orbit-weywot npm...

Malicious code in pino-orbit-bootes-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6c6c0a0cf85e2aa9ff42e45b52e8713bd5642d193b196ea160f5a6de1de04689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in orbit-uglify-js-jsonp-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b2f67f51439db8d80903c494a8883b2f0a4ccb719125222b3283e8d6be238ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111540

Malicious code in luna-orbit-inquirer-convict npm...

EUVD-2025-111195

Malicious code in meteor-nconf-eslint-orbit npm...

EUVD-2025-124003

Malicious code in orbit-websockets-scripts-pegasus npm...

EUVD-2025-121675

Malicious code in standard-bootstrap-restart-orbit npm...

EUVD-2025-121247

Malicious code in titan-janus-celeste-orbit npm...

EUVD-2025-123506

Malicious code in postcss-loader-yakutsk-europa-orbit npm...