EUVD-2025-111610

Malicious code in loglevel-changelog-alphard-lint npm...

EUVD-2025-111544

Malicious code in luna-alphard-carpo-kastra npm...

EUVD-2025-121888

Malicious code in soap-taurus-alphard-await npm...

EUVD-2025-112984

Malicious code in halley-alphard-process-async npm...

EUVD-2025-116782

Malicious code in alphard-cluster-reveal-md-sedna npm...

EUVD-2025-116776

Malicious code in alphard-hugo-enceladus-child-process npm...

EUVD-2025-116259

Malicious code in axios-vulcan-alphard-config npm...

EUVD-2025-124248

Malicious code in npm-alphard-mongodb-nodemon npm...

EUVD-2025-124618

Malicious code in nconf-alphard-electron-duplex npm...

EUVD-2025-122550

Malicious code in restart-alphard-procyon-phoebe npm...

Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116775

Malicious code in alphard-indus-nconf-foundation npm...

MAL-2025-139330 Malicious code in alphard-mongoose-ursa-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 322015036a324c266efd49ce30cd139258c87d00c27958a48d08ff1172e2a08b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141690 Malicious code in dorado-jsonp-alphard-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5d986aac1302f1d13be93e50f6e9f51836d226d7e9f291313b280eaec194504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145673 Malicious code in npm-alphard-mongodb-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d95542288931cd3d5d462529f222d90c0fe40a687de3fd60c6d1dfbfe0ded262 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143246 Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149348 Malicious code in webdriver-mocha-geckodriver-alphard-spica (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 424af51b3129b7f488560fc79efa78acbfe2a6acedce4e79dde2a31d03191a00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146743 Malicious code in proxima-sqlite-module-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a89ea8c2f514e88e7093fd8bb889342fc05092b55d0102db020201dd5034ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139316 Malicious code in alphard-aurora-css-minimizer-webpack-plugin-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cadd965cb26d39282845d1f921990c4270984dbf20e54e6ba597fdd8158afe87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149202 Malicious code in vuetify-alphard-dynamo-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d55fa9c7ec7f02c2efbe3f8f04e4a49d7bc3465be28ffbf97b4dd6915297c77e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...