EUVD-2025-179574

Malicious code in cordelia-solis-markdown-xerxes npm...

EUVD-2025-180471

Malicious code in aldebaran-markdownlint-phoebe-cordelia npm...

Malicious code in archaeometry-cordelia-capella-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2c8d6a31e349fd295ea6069c1f1bc56f8eba23734d8405f248f309f202a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-babel-on-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 991867c5b89cb50239cb4c2cf768a904fa2112cce0f729488b115918476c467a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-zenith-ganymede-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52cc7a0b5ee7ab3c856d1daa1a376b8b8524151fc4f7a6b66551f0059afb40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-remark-cordelia-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d03050b2cb2866d7de11164971c4591795fadadb14bdf9da6411cc366238b169 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176274

Malicious code in spawn-venus-hydra-cordelia npm...

EUVD-2025-176029

Malicious code in tectonophysics-farout-cordelia-darkenergy npm...

EUVD-2025-176012

Malicious code in terraforming-nebula-cordelia-virtualreality npm...

EUVD-2025-175929

Malicious code in toml-ethology-cordelia-carpo npm...

EUVD-2025-177771

Malicious code in mongoose-cordelia-hawkingradiation-antares npm...

EUVD-2025-177654

Malicious code in neptune-sqlite-cordelia-cypress npm...

EUVD-2025-177261

Malicious code in perseus-cordelia-google-express npm...

EUVD-2025-177081

Malicious code in prettier-cordelia-npm-toml npm...

EUVD-2025-176513

Malicious code in saturnology-equinox-cordelia-wavefunction npm...

EUVD-2025-178005

Malicious code in luna-cordelia-blackhole-lithosphere npm...

EUVD-2025-178738

Malicious code in gemini-sagitta-cordelia-aether npm...

EUVD-2025-178362

Malicious code in io-cordelia-meteor-filament npm...