EUVD-2025-115825

Malicious code in cache-postcss-phoebe-xenos npm...

EUVD-2025-115155

Malicious code in commitlint-auriga-xenos-react-bootstrap npm...

EUVD-2025-115138

Malicious code in commitlint-config-angular-pegasus-xenos-npm npm...

EUVD-2025-115065

Malicious code in config-xenos-procyon-europa npm...

EUVD-2025-116715

Malicious code in andromeda-xenos-relay-npm npm...

EUVD-2025-116652

Malicious code in antares-xenos-fornax-forever npm...

EUVD-2025-116881

Malicious code in adonis-xenos-got-gacrux npm...

EUVD-2025-116780

Malicious code in alphard-enif-xenos-neptune npm...

EUVD-2025-120250

Malicious code in xenos-levels-supervisor-hapi npm...

EUVD-2025-120228

Malicious code in xerxes-farout-xenos-aurora npm...

EUVD-2025-123788

Malicious code in phenomic-fomalhaut-xenos-solis npm...

Malicious code in andromeda-xenos-relay-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4a0e5979a37668f23e180bde79ead45f1bedefb653cbdb6a846c2c4d8a99c36 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123531

Malicious code in postcss-loader-commitizen-foundation-xenos npm...

Malicious code in xenos-style-loader-transport-electron-builder (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8207d9edb05f31592dc56be9b98d0e2ac56c7bb7c766278adf76b39dcd12b72 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115210

Malicious code in command-child-process-perseus-xenos npm...

EUVD-2025-120253

Malicious code in xenos-gridsome-quito-chakra-ui npm...

EUVD-2025-123266

Malicious code in promise-xenos-semantic-release-grus npm...

MAL-2025-144518 Malicious code in loglevel-prompts-xenos-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee820c35d475c176e55f15d2ab1c6e6291ac53809a568f4ce77a90c5700fd41a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142552 Malicious code in fomalhaut-rest-xenos-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b59d8633530988e6f0c2f5b25ba330adf84ea689d15e0e288004ed1d9bad46c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139999 Malicious code in betelgeuse-quantum-xenos-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8cc94a96e01810e6f1e5a0431edd2b630787a1e5d54a45b4791f23add3dc17b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...