CVE-2021-22302

There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1C00E1R1P1. A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service...

EUVD-2025-176736

Malicious code in regulus-taurus-reveal-md-exoplanet npm...

EUVD-2025-177295

Malicious code in pavo-colors-taurus-eslint-plugin npm...

Malicious code in taurus-deimos-package-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fdb160245be134cc43b3db4192ef85905aace2254ef9e168298ee0cabe4239f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178359

Malicious code in io-octans-taurus-sedna npm...

EUVD-2025-179325

Malicious code in dependencies-taurus-dotenv-safe-ora npm...

EUVD-2025-176050

Malicious code in taurus-css-minimizer-webpack-plugin-ophiuchus-webdriverio npm...

EUVD-2025-178169

Malicious code in kuiperbelt-taurus-csv-ceres npm...

Malicious code in pavo-colors-taurus-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4822eb2e312a8df244e9a3d06ff9c91bcb9d9f9cf6fdc56dedac94c979d42c1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177525

Malicious code in nova-relay-cosmogenic-taurus npm...

EUVD-2025-179782

Malicious code in chalk-paleontology-quasar-taurus npm...

EUVD-2025-177507

Malicious code in nuxtjs-quasarjet-cross-env-taurus npm...

EUVD-2025-178664

Malicious code in gravity-taurus-superflare-version npm...

MAL-2025-188375 Malicious code in nuxtjs-quasarjet-cross-env-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector facc075dd9444f2723af86599f1c0a112a283b2d101a025f16374e4e5a91ff5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186557 Malicious code in dependencies-taurus-dotenv-safe-ora (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb5b2595b005439f28ca60b17c903b163cc631d10b922571145380eb57a965b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178420

Malicious code in indus-virgo-publish-taurus npm...

EUVD-2025-176089

Malicious code in sync-taurus-cluster-webpack npm...

EUVD-2025-176043

Malicious code in taurus-webdriverio-helios-gemini npm...

Malicious code in taurus-webdriverio-helios-gemini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af5e60879dae39c4dc26ef0acfb0ae266ca696401551bb9c57132080c93b8a10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carina-telesto-taurus-cladistics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41d6f0ea86b084adb8b06876f51ec67386e9c0909ef0c64ef6d102bb502980a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...