EUVD-2025-121998

Malicious code in shelljs-procyon-jsonp-nova npm...

EUVD-2025-123106

Malicious code in publish-start-mui-nova npm...

EUVD-2025-111753

Malicious code in levels-octans-nova-warp npm...

EUVD-2025-120179

Malicious code in xo-nova-thuban-eslint-plugin npm...

EUVD-2025-114904

Malicious code in cosmos-cypress-registry-nova npm...

EUVD-2025-124119

Malicious code in odin-sequelize-cordelia-nova npm...

MAL-2025-142802 Malicious code in ganymede-hugo-phoebe-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dd80c359670756604b123ce061016e43ada44c4484b1a074625aef1412f9bae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145655 Malicious code in nova-configstore-envconfig-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ce7ba149dfab81053af19e5fda3cd4e6ef2373a58b40e024f4b6e06cd32a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145659 Malicious code in nova-fornax-pegasus-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a92e93603d4e4b320679f5d58b83f3e5c3e66c38661dc724f201b49fd9aa12e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143132 Malicious code in halley-centauri-norma-nova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 96ddfa965dcb56981dcecfed8762533200cf42e04ee91f3a9e618f669a5e796a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143682 Malicious code in install-rimraf-nova-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27a6bb9d55fc9bbf225f87ea52b6f59a890034af0ab668485ba8c1b7b3b42f6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124262

Malicious code in nova-fornax-pegasus-orbit npm...

EUVD-2025-124251

Malicious code in nova-umbriel-axios-ganymede npm...

EUVD-2025-124253

Malicious code in nova-slides-concurrently-slidev npm...

EUVD-2025-123707

Malicious code in pino-cypress-nova-commitizen npm...

EUVD-2025-124254

Malicious code in nova-sirius-warp-csv npm...

EUVD-2025-115615

Malicious code in castor-procyon-nova-development npm...

EUVD-2025-124257

Malicious code in nova-postcss-loader-nuxtjs-duplex npm...

Malicious code in nova-postcss-loader-nuxtjs-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10a129ef4191202f0f2db76704ca51ebd60405bfa156b39b9ee8c9a0adc811c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...