EUVD-2025-113760

Malicious code in exec-markdown-pdf-lyra-postgres npm...

EUVD-2025-116672

Malicious code in antares-perseus-indus-exec npm...

EUVD-2025-113776

Malicious code in exec-algol-magellan-nashira npm...

Malicious code in winston-telesto-update-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b0f31224fe8724da5f01db3414046e77f8b195722134872776dde5942a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113759

Malicious code in exec-materialize-airbnb-dagda npm...

EUVD-2025-113749

Malicious code in exec-scorpius-toml-transform npm...

EUVD-2025-113770

Malicious code in exec-fusion-backend-corvus npm...

EUVD-2025-121556

Malicious code in subscription-zephyr-exec-pegasus npm...

EUVD-2025-123856

Malicious code in perseus-adonis-bootstrap-exec npm...

EUVD-2025-113775

Malicious code in exec-antares-prettier-izar npm...

EUVD-2025-115972

Malicious code in browserify-meteor-exec-jsonp npm...

EUVD-2025-116123

Malicious code in betelgeuse-exec-update-magellan npm...

EUVD-2025-112972

Malicious code in halley-exec-cordelia-polaris npm...

MAL-2025-140990 Malicious code in commitlint-jovian-exec-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2a83712f940d043472046dfe7c051ea32c09b485d15a401d1e980e1167464e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144247 Malicious code in lacerta-middleware-procyon-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da1b28da3265a24a7bcce4680ed10ee0d5aa21f933a37897e5c22f5b5203a960 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141842 Malicious code in dynamo-venus-exec-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9834f191e6973ca933792bcd792d09f9f84d657d97d0348de6e3af16f84fc6ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120976

Malicious code in uninstall-axios-node-sass-exec npm...

MAL-2025-148161 Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...