Malicious code in foundation-canopus-charon-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e7ae315c9f2f6c6650ed867026c7352f7ad0f33a06976f649b4fa2cf022f67d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115740

Malicious code in canopus-nova-dotenv-umbriel npm...

EUVD-2025-122709

Malicious code in relay-xenon-arcturus-canopus npm...

EUVD-2025-112487

Malicious code in init-kastra-leda-canopus npm...

EUVD-2025-121328

Malicious code in testcafe-promise-eslint-plugin-canopus npm...

EUVD-2025-115750

Malicious code in canopus-centauri-yildun-framework npm...

EUVD-2025-115734

Malicious code in canopus-rollup-semantic-ui-heka npm...

EUVD-2025-122382

Malicious code in run-script-changelog-publish-canopus npm...

EUVD-2025-116930

Malicious code in acamar-dagda-canopus-xanthus npm...

EUVD-2025-123002

Malicious code in quark-capella-canopus-altair npm...

EUVD-2025-122638

Malicious code in repository-triton-canopus-odin npm...

EUVD-2025-115731

Malicious code in canopus-vortex-fornax-warp npm...

EUVD-2025-112675

Malicious code in hydra-canopus-subscription-fornax npm...

EUVD-2025-116182

Malicious code in barnard-warp-auth0-canopus npm...

Malicious code in repository-canopus-csrf-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57df37eeb7e187b75a267e5bee180848261635a3aa7cba4cddb584697124456d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112357

Malicious code in izar-fusion-thuban-canopus npm...

Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140369 Malicious code in canopus-proxima-orbit-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e186216f85d63256fefaad2eb59f9195d58954971b2eab47d48a84c3dfb5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115951

Malicious code in buffer-canopus-winston-repository npm...

MAL-2025-140376 Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...