EUVD-2025-123905

Malicious code in pegasus-antares-hydra-phoenix npm...

EUVD-2025-124659

Malicious code in mysql-pegasus-lyra-webdriverio npm...

EUVD-2025-122149

Malicious code in sedna-mensa-pegasus-quantum npm...

EUVD-2025-123769

Malicious code in phoebe-gravity-pegasus-webdriver-mocha npm...

EUVD-2025-123867

Malicious code in pegasus-spectron-webdriver-neptune-uninstall npm...

EUVD-2025-116809

Malicious code in algol-chromedriver-pegasus-kronos npm...

EUVD-2025-122396

Malicious code in rollup-plugin-wolf-markdownlint-pegasus npm...

EUVD-2025-113962

Malicious code in eridanus-io-andromeda-pegasus npm...

EUVD-2025-111238

Malicious code in metalsmith-graphql-pegasus-hermes npm...

EUVD-2025-114219

Malicious code in electron-altair-charon-pegasus npm...

EUVD-2025-115138

Malicious code in commitlint-config-angular-pegasus-xenos-npm npm...

MAL-2025-147360 Malicious code in rest-pegasus-miranda-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a609dd6810e3c9556153e9e509d555cd3ff54164dbb8152df6a11c449aa87c3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147463 Malicious code in rocket-bellatrix-slides-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c27c31597941ce5a566db60d7d472f7a2811fd08f8476dbb11b9074b61a8d764 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146046 Malicious code in pegasus-publish-mongoose-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ceca5bf5ad3eeb9dc535efb9f2ed64bca85aa519539a639405784791be1baae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144877 Malicious code in metalsmith-graphql-pegasus-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f17541e872a174d77d0112b013ca7a42e843793669c3082e2c94fd27cdf7dfa4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148467 Malicious code in taurus-development-sirius-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7be8b5020ffe59b7b9afc50b4ca06dc749d7ade12a8b455458bca24118978902 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144935 Malicious code in meteor-semantic-release-inquirer-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09d1b5167b18e8d059fdc524c027f92ebfb7134ffd5ec7a564dea081c41e2869 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146026 Malicious code in pegasus-envconfig-wasat-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bb3c8a932b15d91dfb13038e031e46cecbe14cba78be0527c74a12a035d982c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141264 Malicious code in cross-env-pegasus-async-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a6a5d9de5d3e6171d01a2b039e57bcc853f57222af8a5c94eaf0f922621903 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142082 Malicious code in envconfig-oberon-pegasus-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ef64ff1bc722482830eba161032dd8841a2c241cdc58316dee04dd4f0048768 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...