EUVD-2025-116216

Malicious code in backend-exec-readable-vulcan npm...

EUVD-2025-116123

Malicious code in betelgeuse-exec-update-magellan npm...

EUVD-2025-116027

Malicious code in bootes-deneb-exec-axios npm...

EUVD-2025-115972

Malicious code in browserify-meteor-exec-jsonp npm...

EUVD-2025-120401

Malicious code in winston-telesto-update-exec npm...

EUVD-2025-121035

Malicious code in ultra-exec-event-miranda npm...

EUVD-2025-120976

Malicious code in uninstall-axios-node-sass-exec npm...

EUVD-2025-120830

Malicious code in vega-supervisor-exec-taurus npm...

EUVD-2025-120819

Malicious code in venus-exec-sagitta-ophiuchus npm...

EUVD-2025-122121

Malicious code in selenium-cypress-izar-exec npm...

EUVD-2025-111609

Malicious code in loglevel-cross-env-exec-update npm...

Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112908

Malicious code in heka-exec-terser-webpack-plugin-start npm...

EUVD-2025-113762

Malicious code in exec-koa-andromeda-google npm...

EUVD-2025-111482

Malicious code in magellan-elara-galaxy-exec npm...

EUVD-2025-112637

Malicious code in hyperion-grus-aether-exec npm...

EUVD-2025-112582

Malicious code in ignite-terser-semantic-release-exec npm...

EUVD-2025-111942

Malicious code in kinetic-exec-spectron-webdriver-child-process npm...

Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in betelgeuse-exec-update-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e555950e15a7e2b4e020ff7b30c178cb7e9d44c348eb8310e6831db7125e83f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...