EUVD-2025-120755

Malicious code in virgo-xerxes-pegasus-publish npm...

EUVD-2025-123091

Malicious code in pulsar-farout-pegasus-publish npm...

Malicious code in pulsar-farout-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146831 Malicious code in pulsar-farout-pegasus-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 936458586d508d170d49bbd490dbb216acb183554cece11d629cd5fddeff09bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...