EUVD-2025-114694

Malicious code in cz-conventional-changelog-comet-prompts-link npm...

EUVD-2025-113068

Malicious code in gridsome-hapi-comet-jovian npm...

EUVD-2025-116172

Malicious code in bellatrix-comet-spica-nightwatch npm...

EUVD-2025-115238

Malicious code in comet-canopus-deneb-websockets npm...

EUVD-2025-114422

Malicious code in dorado-halley-comet-dynamo npm...

EUVD-2025-116740

Malicious code in altair-radiant-comet-schema npm...

EUVD-2025-123690

Malicious code in pino-pretty-comet-apollo-perseus npm...

EUVD-2025-124300

Malicious code in non-blocking-sqlite-comet-eclipse npm...

EUVD-2025-115228

Malicious code in comet-materialize-hermes-eslint npm...

EUVD-2025-124203

Malicious code in nuxtjs-uglify-js-loopback-comet npm...

EUVD-2025-115226

Malicious code in comet-mutation-hydra-spawn npm...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in comet-event-husky-typeorm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d106946017d4e4f863622b3e6fabb769bf7517907828720446c9f69f07e589a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuxtjs-uglify-js-loopback-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 969453b7c95bbb635798c2fbb32eb82ad057c0ecee4a345dff7328325dd2a255 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111209

Malicious code in meteor-cross-env-promise-comet npm...

EUVD-2025-122499

Malicious code in reveal-md-procyon-comet-jabbah npm...

EUVD-2025-113604

Malicious code in firebase-playwright-comet-nodemon npm...

Malicious code in elektra-comet-kaus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f19e35c748b77d4b457b3cb6602edbd409762762c7000fa53eba59cea78c3b0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wolf-comet-fetch-aether (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94cb2cd055ee7e7789085864d11a9b77d1aab75944129455913dabd8cf582247 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aether-achernar-comet-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8eeb0d0bb8f97673b41dc8aee57cff7bb2a8e7f779b5445b1c56ba83a5e61e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...