EUVD-2025-124004

Malicious code in orbit-venus-stop-jovian npm...

EUVD-2025-121622

Malicious code in stop-slides-mutation-non-blocking npm...

EUVD-2025-116412

Malicious code in auriga-stop-superagent-vortex npm...

EUVD-2025-111675

Malicious code in lint-hapi-stop-nightwatch npm...

Malicious code in stop-polaris-gravity-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9eba5f01f9a9e3d932f8d07a8043fff56153b5b693c9f0aa45bd3d51c997c687 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121624

Malicious code in stop-polaris-gravity-apollo npm...

EUVD-2025-115539

Malicious code in ceres-hydra-rocket-stop npm...

EUVD-2025-111980

Malicious code in kastra-stop-vuetify-jest npm...

EUVD-2025-113291

Malicious code in ganymede-sagitta-mui-stop npm...

MAL-2025-144040 Malicious code in juno-superagent-stop-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 987855d522deaa8e2efe1c3697d32579dd6a94d8373a06d043bec7b5547b0efb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124164

Malicious code in oberon-sedna-css-loader-stop npm...

EUVD-2025-114618

Malicious code in deimos-cressida-kronos-stop npm...

EUVD-2025-112571

Malicious code in impulse-event-stop-celeste npm...

EUVD-2025-120293

Malicious code in xanthus-stop-antares-carina npm...

EUVD-2025-121634

Malicious code in stop-colors-native-sedna npm...

MAL-2025-140608 Malicious code in chai-zephyr-jasmine-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d141d9e454317e0cf8e1698d576224400e48df61534527f0678f0d477a7953c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140143 Malicious code in browserify-stop-sagitta-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26fb65db83237cfff58b0e4af1e88a81f87370bff46c3902bb7ae2cd9deb6959 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145546 Malicious code in node-sass-loglevel-stop-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a7535b8bc3308fea5d62aa18a1d257a3e693dea8b423fcfeac5e9ae315d78a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145902 Malicious code in orbit-carpo-stop-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0cc73fb28f30595738f9102c7e9d6150fe6f8e4e3776f6c4746ad2042242533f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145381 Malicious code in neptune-stop-semantic-release-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854d36ed66287193682ff19d42027a1746c092392f6048ce77b2adf23c3031f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...