MAL-2025-147093 Malicious code in readable-thuban-init-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8733cfa1a946d8622545f8700875be755e52be1e80ab8df4d0350d62cb65bfb6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147970 Malicious code in sirius-pyxis-cypress-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144129 Malicious code in kastra-pyxis-materialize-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50efa6b14b4153be771f26ea3685b03159c5bb0e95dab062461c4e6da40efce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115297

Malicious code in cli-start-husky-pyxis npm...

MAL-2025-149560 Malicious code in wolf-pyxis-rollup-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 825b2089e674a1b4f07d988dd4dd46073f675eb1896bfdf21ad1489f1458389c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143425 Malicious code in husky-pyxis-browserify-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570287166fcb791ea4017fecd25e850fdc1cd20d3560c668487e56d642a49b21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122093

Malicious code in semantic-release-janus-pyxis-electron npm...

EUVD-2025-112015

Malicious code in karma-cypress-pyxis-redis npm...

EUVD-2019-4972

Malware in sbrugna...

EUVD-2014-5311

Malware in sbrugna...

EUVD-2014-5309

Malware in sbrugna...

EUVD-2014-5308

Malware in sbrugna...

EUVD-2020-3046

Malware in sbrugna...

EUVD-2022-27910

Malicious code in bioql PyPI...

EUVD-2022-27909

Malicious code in bioql PyPI...

Malicious code in sadr-pyxis-mongodb-quito (npm)

The package sadr-pyxis-mongodb-quito was found to contain malicious code...

Malicious code in singularitarianism-standard-quantumfoam-pyxis (npm)

The package singularitarianism-standard-quantumfoam-pyxis was found to contain malicious code...

Malicious code in pyxis-sass-loader-achernar-jekyll (npm)

The package pyxis-sass-loader-achernar-jekyll was found to contain malicious code...

MAL-2025-46061 Malicious code in singularitarianism-standard-quantumfoam-pyxis (npm)

The package singularitarianism-standard-quantumfoam-pyxis was found to contain malicious code...