EUVD-2025-123492

Malicious code in postgres-canopus-supervisor-standard npm...

EUVD-2025-123048

Malicious code in pyxis-cypress-chromedriver-canopus npm...

EUVD-2025-115750

Malicious code in canopus-centauri-yildun-framework npm...

Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115737

Malicious code in canopus-proxima-orbit-query npm...

Malicious code in xo-sirius-cors-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a706eabb5bc1ada3cbadf53709853d49ed268736f58f26c9c2c37e6a7549e09 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122709

Malicious code in relay-xenon-arcturus-canopus npm...

MAL-2025-140363 Malicious code in canopus-leda-postgres-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16592b4ce6c067b6870d21abaf030dffb146d291061175fd9639b09e183061f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116937

Malicious code in acamar-canopus-mui-dependencies npm...

EUVD-2025-112616

Malicious code in hyperion-repository-canopus-aldebaran npm...

EUVD-2025-120660

Malicious code in warp-inquirer-perseus-canopus npm...

EUVD-2025-116930

Malicious code in acamar-dagda-canopus-xanthus npm...

EUVD-2025-113639

Malicious code in figures-lacerta-ceres-canopus npm...

EUVD-2025-122382

Malicious code in run-script-changelog-publish-canopus npm...

EUVD-2025-115743

Malicious code in canopus-leda-postgres-cassini npm...

EUVD-2025-115735

Malicious code in canopus-publish-hyperion-release-it npm...

Malicious code in grus-canopus-mutation-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5664bfa8cb0f8ea74e02667e677c54ce8adf8252363128555627600e9c6f1e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115047

Malicious code in configstore-repository-terser-canopus npm...

EUVD-2025-113878

Malicious code in eslint-plugin-galaxy-xml-canopus npm...

Malicious code in canopus-proxima-orbit-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67e186216f85d63256fefaad2eb59f9195d58954971b2eab47d48a84c3dfb5b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...