EUVD-2025-177208

Malicious code in phoebe-petrology-sirius-fermiparadox npm...

EUVD-2025-179425

Malicious code in cz-conventional-changelog-sirius-cluster-tectonophysics npm...

Malicious code in carpo-lynx-sirius-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a61b45a733442dad2bee78073691142efef575d4be2352de5061b96005b2b5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179608

Malicious code in config-dactyl-foundation-sirius npm...

EUVD-2025-179888

Malicious code in callisto-sirius-farout-multiverse npm...

EUVD-2025-176647

Malicious code in reveal-md-sirius-sequelize-nebula npm...

EUVD-2025-176363

Malicious code in sirius-astroinformatics-ursa-futurology npm...

EUVD-2025-177982

Malicious code in magellan-enif-oauth-sirius npm...

Malicious code in graviton-jest-sirius-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 708513596392842c51fbc68d96a94effdcbcd2bd6e193062a68f8d11148c0e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176361

Malicious code in sirius-darkenergy-selenium-stream npm...

EUVD-2025-175997

Malicious code in terser-webpack-plugin-spectron-webdriver-sirius-enceladus npm...

MAL-2025-187239 Malicious code in grunt-bellatrix-less-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a265433e400938b3a3824f9989743cc4d22f5b9a85ab90856ac06d2e29d757f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-190376 Malicious code in xenon-sirius-scripts-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc59bb199e537098aabd62f83528d0fe807818af58acb052a12b5198cddd98f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180381

Malicious code in apollo-sirius-upgrade-iota npm...

EUVD-2025-177892

Malicious code in mesosphere-jupiter-sirius-spinner npm...

EUVD-2025-178670

Malicious code in graviton-jest-sirius-vuepress npm...

EUVD-2025-179696

Malicious code in cluster-sirius-promise-neutrino npm...

EUVD-2025-176349

Malicious code in sirius-yonder-algol-quantum npm...

EUVD-2025-178666

Malicious code in gravity-juno-cors-sirius npm...

Malicious code in sirius-registry-webpack-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c310c475846e8ee5e7c18a1b32e566c7929067fa02791639c37510e9d7820c0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...