MAL-2025-139165 Malicious code in acamar-canopus-mui-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4fb2afde0e9df1141200a38e0ea82bee518c42654864678f9679e55f5ee661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114425

Malicious code in dorado-chalk-canopus-exec npm...

EUVD-2025-122477

Malicious code in rimraf-canopus-promise-janus npm...

Malicious code in canopus-hermes-postcss-loader-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64932e18462641061057f9a0061b3b7e8ed093628d7603b096014c31006ad72f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115016

Malicious code in convict-telesto-fomalhaut-canopus npm...

EUVD-2025-116937

Malicious code in acamar-canopus-mui-dependencies npm...

EUVD-2025-113149

Malicious code in google-izar-venus-canopus npm...

EUVD-2025-116918

Malicious code in acamar-pm2-deimos-canopus npm...

EUVD-2025-123175

Malicious code in proxima-transport-pulsar-canopus npm...

EUVD-2025-115729

Malicious code in canopus-xanadu-markdownlint-non-blocking npm...

EUVD-2025-114757

Malicious code in csv-ora-relay-canopus npm...

Malicious code in acamar-dagda-canopus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f77f13b3a7f9e9e576d7e42f24d4d463de5af216c31245b4cecd87f52d7ba10d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122419

Malicious code in rollup-mui-canopus-phoenix npm...

Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in canopus-rollup-semantic-ui-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5103f0a8650f4e9f282e4b3f6b488dc1bca436344cd8eaa9a147741e10b363f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115747

Malicious code in canopus-hermes-postcss-loader-xanthus npm...

EUVD-2025-115744

Malicious code in canopus-kronos-arcturus-toml npm...

MAL-2025-141684 Malicious code in dorado-chalk-canopus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9780f97be9dad27f3d893ac69914d86d4366e962fcb1202373b7f0fab22d148d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113878

Malicious code in eslint-plugin-galaxy-xml-canopus npm...

Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...