EUVD-2025-180354

Malicious code in archaeometry-cordelia-capella-dotenv npm...

EUVD-2025-179578

Malicious code in cordelia-babel-on-proxima npm...

EUVD-2025-180157

Malicious code in backend-crust-cordelia-markdown-pdf npm...

EUVD-2025-176012

Malicious code in terraforming-nebula-cordelia-virtualreality npm...

EUVD-2025-180091

Malicious code in betelgeuse-development-heliophysics-cordelia npm...

EUVD-2025-180341

Malicious code in arcturus-nuxtjs-cordelia-run-script npm...

EUVD-2025-179573

Malicious code in cordelia-websockets-yakutsk-quark npm...

EUVD-2025-179576

Malicious code in cordelia-dione-hyperion-superposition npm...

EUVD-2025-176298

Malicious code in socketio-cordelia-nightwatch-petrology npm...

EUVD-2025-179577

Malicious code in cordelia-cors-lyra-accretion npm...

EUVD-2025-179359

Malicious code in delphinus-chromedriver-quasar-cordelia npm...

EUVD-2025-176029

Malicious code in tectonophysics-farout-cordelia-darkenergy npm...

MAL-2025-187520 Malicious code in io-cordelia-meteor-filament (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37bb443e8b535dc59175b1ef8d7eb72d284f31f0b56ff72943312cddcb025736 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189577 Malicious code in socketio-cordelia-nightwatch-petrology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4209f9a2070f854d5309b6e36e08d1ae3e7f215e342ac56025d7be33d1cf16d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-zenith-ganymede-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52cc7a0b5ee7ab3c856d1daa1a376b8b8524151fc4f7a6b66551f0059afb40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rollup-plugin-html-webpack-plugin-cordelia-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2554973e6e1d34edad7b0276e63e4eb111a0a6bf2f4ddf64775f7090d414bc24 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185547 Malicious code in arcturus-nuxtjs-cordelia-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ed828d4efc8fa57e88ad8c077f137feda533b4d5525b0a6eac490f310ff99b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177654

Malicious code in neptune-sqlite-cordelia-cypress npm...

EUVD-2025-177771

Malicious code in mongoose-cordelia-hawkingradiation-antares npm...

Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...