EUVD-2025-112742

Malicious code in html-webpack-plugin-rigel-heka-gemini npm...

EUVD-2025-114003

Malicious code in epimetheus-rigel-rollup-schema npm...

EUVD-2025-122491

Malicious code in rigel-kronos-react-bootstrap-server npm...

EUVD-2025-112508

Malicious code in ini-rigel-framework-helmet npm...

MAL-2025-145794 Malicious code in odin-grus-rigel-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a756eb41b87e1ab320a650e477863fcc7edbdc9c4a284b3976c2468ae303845 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122641

Malicious code in repository-rigel-nodemon-websockets npm...

Malicious code in buffer-hapi-rigel-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 234a847915fb916fc1124bffbe53d55bdd12c690cd1d599a343da90e19e60111 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rimraf-izar-html-webpack-plugin-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969f0af5a2acd4f35bc9f6a12bfdee60b30945dd4a21464b014b22f579711f02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121668

Malicious code in standard-promise-rigel-ursa npm...

EUVD-2025-120923

Malicious code in upgrade-centauri-query-rigel npm...

EUVD-2025-111693

Malicious code in link-rigel-lint-leda npm...

EUVD-2025-115117

Malicious code in commitlint-link-rigel-elektra npm...

EUVD-2025-112731

Malicious code in hugo-chalk-rigel-phoebe npm...

MAL-2025-142107 Malicious code in epimetheus-rigel-rollup-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 970f0e8f7b81835e178ce9e67e9903be29c68165b1cf69f378bff38f4c4ade6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144290 Malicious code in leda-rigel-antares-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be301a42f033b5a9ea4c10f77415df52a52f4f062a65466b42ffb532f5484804 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149821 Malicious code in yildun-publish-rigel-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad41b4f77799c536644ce19f2d0b364a90968668783412895a1440eb38afd37d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146044 Malicious code in pegasus-nuxtjs-nightwatch-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dc38e25ae939a2a042c8cf5c3865a6e8479f2d74f275f30ffd53c4bdbedcb729 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141480 Malicious code in dagda-ora-vortex-rigel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 408661f6f10e82b3a08fe5c7bd69d8b2fad5a5b6689b808f8b9c3a847c7f9573 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143605 Malicious code in ini-rigel-framework-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51e6a460eaceaef16c9333b123fd0edda2d6049e201f24ea333cd2252d55a35a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144931 Malicious code in meteor-rigel-ursa-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dde6e12cc8594ea352e04add79e53796bcdcb715a316ac522169eb64406fae5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...