EUVD-2025-116447

Malicious code in atlas-radiant-sirius-ora npm...

Malicious code in juno-sirius-react-bootstrap-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1187ba054fc9b46477a91275100c1ebc2b34469d8a5e8314d2cfb9fe05d71488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121944

Malicious code in sirius-transport-barnard-centaurus npm...

Malicious code in sirius-sedna-sass-loader-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5b0424ecff4b8401ec52079df0e74a63b387aa5a0c62be3599366ce04f1b57d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115451

Malicious code in chalk-sirius-commitlint-hapi npm...

EUVD-2025-121970

Malicious code in sirius-gulp-playwright-jovian npm...

EUVD-2025-114876

Malicious code in cressida-gatsby-sirius-apollo npm...

Malicious code in sirius-gatsby-subscription-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9893a805326d97966c1675d8e4b2a711528e8eaa5a954e8ff750210898f55a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121954

Malicious code in sirius-readable-centaurus-firebase npm...

Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145078 Malicious code in mocha-graphql-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae61cac71de360191dd6072306001b2bb6392cf8b16e63c7085e2d018ac6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121961

Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel npm...

MAL-2025-145058 Malicious code in miranda-sirius-jasmine-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a815edacfaadc13f51e07437f41fc2a931ca4ec7366d1b29d4e184bc67a2ed47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124271

Malicious code in norma-sirius-phoebe-jovian npm...

Malicious code in lint-staged-sirius-xo-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e17f64d7f2c40a23b7372bb25ea8330f1abf134122c1dbca12aa0be572e7394 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147965 Malicious code in sirius-parcel-electron-builder-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d82865d2c4c118814f34f9e55544cc147c81d7874040ad365913faf99ebac58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140782 Malicious code in chromedriver-relay-sirius-rest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f007104bdb79cb21abcbf80450b58281ce1abe552ce9331e05018b461a34546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149757 Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147954 Malicious code in sirius-geckodriver-enif-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec0776b07aa0434a1a3388736eacf003e58d6015d2a3b9b91efc0f673e101973 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147936 Malicious code in sirius-aurora-warp-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5daf0e0b031d2cf938436afe95c35e412c219634f9978e99bd972480618c7d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...