EUVD-2025-178046

Malicious code in local-cz-conventional-changelog-cosmos-quark npm...

EUVD-2025-179517

Malicious code in cosmos-yonder-grunt-nashira npm...

Malicious code in miranda-cosmos-resonance-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c95e97f651188e953913cd0aa5f218e99332b565f20b2a3260e5b791bee3db7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179784

Malicious code in chalk-mui-neptune-cosmos npm...

EUVD-2025-176872

Malicious code in quantum-node-config-quito-cosmos npm...

MAL-2025-186365 Malicious code in cosmos-yonder-grunt-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05ec61cd9ccaae23473fa62ba89bdc0cd77a1cf4c2ad714655057db11196e10b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188811 Malicious code in prettier-stylelint-got-cosmos-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 191ad1021c21de2e4d2aff52918a87b8c01692e87e5d7d02fa1dd71a2f77ed88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177064

Malicious code in prettier-stylelint-got-cosmos-ariel npm...

Malicious code in cosmos-concurrently-uninstall-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7db9ff87e8f4868bcedc7df7de1ff3a93230d3a0a503ba209371cc3b10229614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177033

Malicious code in procyon-cosmos-mutation-pyxis npm...

EUVD-2025-178535

Malicious code in hermes-venus-cosmos-rest npm...

EUVD-2025-176787

Malicious code in rate-limiter-tethys-fermiparadox-cosmos npm...

EUVD-2025-179519

Malicious code in cosmos-void-procyon-nanotechnology npm...

EUVD-2025-179231

Malicious code in duplex-version-polaris-cosmos npm...

EUVD-2025-179522

Malicious code in cosmos-framework-gacrux-pm2 npm...

EUVD-2025-179518

Malicious code in cosmos-volcanology-cassini-nova npm...

EUVD-2025-175648

Malicious code in wasat-betelgeuse-mini-css-extract-plugin-cosmos npm...

EUVD-2025-179345

Malicious code in dendrochronology-colors-cosmos-run-script npm...

EUVD-2025-179521

Malicious code in cosmos-geochemistry-sqlite-lint-staged npm...

MAL-2025-188271 Malicious code in nextjs-tachyon-apollo-cosmos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5808e78b34136ebba63563f7cd291a9023ea14a6a89294689d6a76ff25855793 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...