EUVD-2025-175831

Malicious code in umbriel-eslint-config-kardashevscale-jwt npm...

Malicious code in umbriel-transform-corvus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0535ab8475a2cfe19c1ada68feab5732883367dc7554d2a673d0616d955ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175828

Malicious code in umbriel-leda-pipe-process npm...

EUVD-2025-175833

Malicious code in umbriel-ariel-rigel-metalsmith npm...

EUVD-2025-179010

Malicious code in europa-umbriel-solis-apollo npm...

EUVD-2025-179663

Malicious code in comet-orbit-umbriel-thermochronology npm...

MAL-2025-187848 Malicious code in loglevel-event-resonance-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e7eec21520de8ed6c0a4d6cca52c2046b026e45372eab13e437e1cd2d38c4f32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175823

Malicious code in umbriel-zenobia-sedna-odin npm...

EUVD-2025-175827

Malicious code in umbriel-paleoanthropology-aldebaran-areology npm...

Malicious code in umbriel-gulp-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a191c64e27e6c7846f4fb786da99ba6ab75ab274a4df6b2b6334a001d7cd9cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178569

Malicious code in heliophysics-pino-umbriel-request npm...

EUVD-2025-177544

Malicious code in nodemon-vega-umbriel-polaris npm...

EUVD-2025-175824

Malicious code in umbriel-transform-corvus-request npm...

EUVD-2025-175829

Malicious code in umbriel-kastra-gacrux-google npm...

Malicious code in umbriel-spica-rate-limiter-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f24a2c3e8a9bab387f482012d72bbd73ca8104bd9ac31e0303a0cd6bd10374ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in testcafe-miranda-electron-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6dc56bc034bb1eb4e4b4fd3fc8d7db620ba01d5807f3200c1c40cfe1f26c695 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186010 Malicious code in cassini-frontend-umbriel-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 450cd01180dcd763f0e71dace6523bf6463b5283590244bd767ac247a40b3c25 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175592

Malicious code in webdriverio-umbriel-sequelize-version npm...

EUVD-2025-178833

Malicious code in framework-umbriel-mongoose-magellan npm...

EUVD-2025-179827

Malicious code in centauri-troposphere-umbriel-decoherence npm...