EUVD-2025-124174

Malicious code in oberon-io-thuban-draco npm...

EUVD-2025-113215

Malicious code in gemini-enceladus-thuban-cygnus npm...

EUVD-2025-116669

Malicious code in antares-promise-thuban-ora npm...

EUVD-2025-121265

Malicious code in thuban-rollup-plugin-chariklo-arcturus npm...

Malicious code in axios-thuban-eslint-plugin-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f8a4f3e23670bbf493f18b8c5c2ef9d2b11ab2ab82c4a82ebb877c44b82bf3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121620

Malicious code in stop-thuban-fetch-electron-builder npm...

EUVD-2025-111862

Malicious code in lacerta-thuban-dynamo-loopback npm...

EUVD-2025-111134

Malicious code in mini-css-extract-plugin-meteor-private-thuban npm...

EUVD-2025-112129

Malicious code in json-thuban-nodemon-nova npm...

EUVD-2025-124190

Malicious code in oauth-figures-thuban-stream npm...

EUVD-2025-121286

Malicious code in thuban-backend-install-wolf npm...

Malicious code in geckodriver-readable-thuban-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3fbee7af91fc32c148f8c4a3e601df8ffa2dcc65f0b9e8a59b9b012f3e6ae5cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116261

Malicious code in axios-thuban-eslint-plugin-got npm...

MAL-2025-139665 Malicious code in atlas-uninstall-warp-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f056ab6718343f1a83f1b078d53bc6fb1719a925893e09a02b5f7671b1a1c2db This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141936 Malicious code in elektra-aether-rocket-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d35c84ccd5965f07d33d6f6f051c93ea065866d5b4ceea168037f7d7a05ff39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148652 Malicious code in thuban-gemini-warp-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 053181b6ef8d4f7582c97fb9eedaae20888f1ba3d215dbe01398d3b7c6460911 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142212 Malicious code in eslint-config-thuban-repository-hexo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41c074994c161bdf7cb79253e0cc659149af99d893068ef5bab57b54a45a15f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148666 Malicious code in thuban-sails-vuetify-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32260a63c8a442d6b55fb4e28e245f3f0e83f6956ac9fd055f20ddfc996d6e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142863 Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143622 Malicious code in init-gulp-eslint-config-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a30d3a37f8255998babc71377202ccf693a25e1a222974689725548e7eff2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...