EUVD-2025-122296

Malicious code in sagitta-umbriel-aldebaran-auriga npm...

Malicious code in umbriel-transform-galaxy-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4278a468d54c2a41272a00e6c27081390b88957c1609f8f70f2c538827a5afba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116793

Malicious code in algol-semantic-release-umbriel-avior npm...

EUVD-2025-120264

Malicious code in xenon-umbriel-jest-eclipse npm...

MAL-2025-139338 Malicious code in alphard-pulsar-umbriel-chakra-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9706a403cde30f3b89e6bdab6ed0efd2615e48746d0458d5f5ccac299ba6ecc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141275 Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115092

Malicious code in concurrently-umbriel-jabbah-meteor npm...

Malicious code in altair-umbriel-child-process-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56c96004ef35148074e4c1f1adf0efbb7176c7ef4fb1b958d124c0ae97eb3479 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120983

Malicious code in umbriel-orbit-firebase-vuepress npm...

EUVD-2025-113813

Malicious code in europa-umbriel-helmet-relay npm...

EUVD-2025-112926

Malicious code in hapi-jovian-hugo-umbriel npm...

EUVD-2025-120988

Malicious code in umbriel-fornax-antd-gatsby npm...

EUVD-2025-115067

Malicious code in config-umbriel-tailwindcss-webpack npm...

EUVD-2025-120985

Malicious code in umbriel-install-cygnus-markdown npm...

Malicious code in spinner-development-cassini-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1980e9d652b81daeb875482c3bb1b2e296302bf80c17586a0b77dd834e11825d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120992

Malicious code in umbriel-chai-celeste-registry npm...

EUVD-2025-115351

Malicious code in child-process-socketio-envconfig-umbriel npm...

EUVD-2025-121342

Malicious code in test-umbriel-postcss-proxima npm...

EUVD-2025-111883

Malicious code in kronos-umbriel-sass-loader-cassini npm...

Malicious code in nightwatch-webdriverio-ursa-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 04d76a8ae7ac7f849a63b9935cae8929b00215be786c61e6de5eb442f344d4fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...