Malicious code in airbnb-relay-hydra-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5aac16f1f71a40b66a4d15575c7941b18cb0512e745728dd89bc41dabb55d2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116493

Malicious code in astro-izar-nova-buffer npm...

EUVD-2025-123124

Malicious code in publish-nova-aether-bellatrix npm...

EUVD-2025-124540

Malicious code in neptune-sirius-nova-chai npm...

EUVD-2025-112431

Malicious code in install-rimraf-nova-antares npm...

Malicious code in loopback-changelog-nova-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d596d73c5cbb63934b0f5f3cd16fab87c035753ffb74a90e8db72291c51a7c22 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112504

Malicious code in ini-tailwindcss-playwright-nova npm...

EUVD-2025-112601

Malicious code in ignite-cosmos-nova-farout npm...

EUVD-2025-124263

Malicious code in nova-farout-test-auth0 npm...

EUVD-2025-115781

Malicious code in callisto-chakra-ui-nova-non-blocking npm...

EUVD-2025-124268

Malicious code in nova-centaurus-telesto-aquarius npm...

EUVD-2025-113145

Malicious code in google-nova-spectron-webdriver-config npm...

MAL-2025-145660 Malicious code in nova-json-terser-vega (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1dfa0a2a56bfd1fc9b3bb79d785fa3baca5f6202ba425c8090df01719d5a098 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148666 Malicious code in thuban-sails-vuetify-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32260a63c8a442d6b55fb4e28e245f3f0e83f6956ac9fd055f20ddfc996d6e11 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124251

Malicious code in nova-umbriel-axios-ganymede npm...

EUVD-2025-124262

Malicious code in nova-fornax-pegasus-orbit npm...

EUVD-2025-120569

Malicious code in webdriver-mocha-npm-nova-helios npm...

EUVD-2025-124266

Malicious code in nova-configstore-envconfig-winston npm...

EUVD-2025-116124

Malicious code in betelgeuse-eslint-plugin-socketio-nova npm...

Malicious code in cli-lynx-nova-element-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8e0af512198e413bd0da9e0fbed417f8a39382fb085a429d28eaec3405abc38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...