EUVD-2025-114301

Malicious code in duplex-elara-charon-pegasus npm...

EUVD-2025-115757

Malicious code in callisto-readable-europa-pegasus npm...

Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123083

Malicious code in pulsar-pegasus-aurora-proxima npm...

Malicious code in titan-pegasus-transport-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10990bdbf8ebcca8bcc01d9ba3c1ab248f0efbb2723319e0abfb784fcd048416 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-impulse-grus-blitz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6509545da991311d3beee8db0afc074abdfa583a2df12ad31f8434c955243b28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124372

Malicious code in node-sass-pegasus-wezen-pegasus npm...

Malicious code in nestjs-cressida-pegasus-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9b69987b3b711712af2620dc816b97bc32e9d6c0e4bf7a77624e4b559718a31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120732

Malicious code in vuepress-pegasus-gravity-betelgeuse npm...

EUVD-2025-121157

Malicious code in transform-pegasus-browserify-docusaurus npm...

EUVD-2025-121528

Malicious code in supervisor-pegasus-odin-proxima npm...

EUVD-2025-123456

Malicious code in prettier-enceladus-pegasus-bunyan npm...

EUVD-2025-123880

Malicious code in pegasus-lyra-rate-limiter-css-minimizer-webpack-plugin npm...

EUVD-2025-122274

Malicious code in sails-jabbah-pegasus-orbit npm...

EUVD-2025-113872

Malicious code in eslint-plugin-public-forever-pegasus npm...

EUVD-2025-121942

Malicious code in slides-callisto-pegasus-dagda npm...

EUVD-2025-123899

Malicious code in pegasus-csv-concurrently-sedna npm...

EUVD-2025-115129

Malicious code in commitlint-enif-pegasus-gulp npm...

Malicious code in pegasus-ganymede-native-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0299fbc6c1fb17da9270c9c40c7ee1e1f3c36a76270c040a793e0f63ca2a63a6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pegasus-chakra-ui-spectron-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7be2d5896071aa511b4fddd7bc90af4dbb750cf4dc6aae32460667ef98b4bb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...