EUVD-2025-115748

Malicious code in canopus-config-karma-dagda npm...

EUVD-2025-113149

Malicious code in google-izar-venus-canopus npm...

EUVD-2025-115742

Malicious code in canopus-lint-altair-cross-env npm...

EUVD-2025-115472

Malicious code in chalk-draco-wezen-canopus npm...

EUVD-2025-122334

Malicious code in sagitta-colors-titan-canopus npm...

EUVD-2025-124835

Malicious code in mocha-karma-canopus-rate-limiter npm...

EUVD-2025-113027

Malicious code in grus-canopus-mutation-quantum npm...

EUVD-2025-121836

Malicious code in solis-spinner-canopus-ganymede npm...

EUVD-2025-112728

Malicious code in hugo-cosmiconfig-hugo-canopus npm...

EUVD-2025-111763

Malicious code in levels-canopus-webdriver-mocha-spectron npm...

EUVD-2025-114244

Malicious code in elara-canopus-markdown-pdf-native npm...

EUVD-2025-120181

Malicious code in xo-ignite-canopus-dagda npm...

Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115215

Malicious code in comet-tethys-phoebe-canopus npm...

Malicious code in canopus-rollup-semantic-ui-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103f0a8650f4e9f282e4b3f6b488dc1bca436344cd8eaa9a147741e10b363f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116285

Malicious code in await-yildun-canopus-fork npm...

EUVD-2025-116281

Malicious code in axios-canopus-yildun-socketio npm...

EUVD-2025-123492

Malicious code in postgres-canopus-supervisor-standard npm...

EUVD-2025-116937

Malicious code in acamar-canopus-mui-dependencies npm...

Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...