EUVD-2025-179526

Malicious code in cosmology-schema-morgan-canopus npm...

EUVD-2025-178538

Malicious code in hermes-dactyl-canopus-flare npm...

EUVD-2025-175681

Malicious code in vuepress-update-canopus-zooarchaeology npm...

EUVD-2025-175982

Malicious code in testcafe-canopus-graphql-markdownlint npm...

EUVD-2025-177158

Malicious code in pipe-cz-conventional-changelog-meissa-canopus npm...

Malicious code in ganymede-public-canopus-hydra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8666d987c2ffe04eca9ec038bd50b9769fb0d7618dc1d35751253b44ab3d5d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187702 Malicious code in koa-vega-zenith-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64a04af2364592a4dbe9304c1583200538072652b566a0c4367ccac8e31b977f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124229

Malicious code in npm-taurus-canopus-electron-builder npm...

EUVD-2025-111617

Malicious code in local-sequelize-canopus-janus npm...

EUVD-2025-123995

Malicious code in package-canopus-cluster-grus npm...

EUVD-2025-115730

Malicious code in canopus-writable-acamar-sirius npm...

EUVD-2025-115739

Malicious code in canopus-pavo-hexo-metalsmith npm...

EUVD-2025-112400

Malicious code in iota-canopus-loopback-eleventy npm...

EUVD-2025-115733

Malicious code in canopus-scorpius-kastra-avior npm...

EUVD-2025-115738

Malicious code in canopus-phoebe-electron-builder-meissa npm...

EUVD-2025-121148

Malicious code in transport-canopus-ganymede-config npm...

EUVD-2025-121822

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122419

Malicious code in rollup-mui-canopus-phoenix npm...

EUVD-2025-124705

Malicious code in mui-stream-jovian-canopus npm...

Malicious code in eslint-plugin-galaxy-xml-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7fa440b71749d145fde8a670cbb74a95100ff3d22173356b9d0dd9711ff2d10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...