EUVD-2025-113111

Malicious code in graphql-deimos-vulcan-helios npm...

Malicious code in helios-algol-norma-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13fd6e85b9e1976f017059caf3a99dfac7420a381fbf45cc11c46863a194d26b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143224 Malicious code in helios-achernar-postcss-loader-cypress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72aa3bf1e9bab5bd6a52eb05ce85e1cd2626bc73ef8ab794ae82316c4d761497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112886

Malicious code in helios-arcturus-rocket-jovian npm...

EUVD-2025-113092

Malicious code in gravity-centauri-helios-antares npm...

EUVD-2025-114392

Malicious code in dotenv-parse-variables-despina-helios-venus npm...

EUVD-2025-120901

Malicious code in upgrade-publish-helios-nashira npm...

Malicious code in kronos-grus-scripts-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f99b9a7468f04a7afd8f06f5a0badcfae4fedd17f6c6995f43b1ed54c14f497 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122735

Malicious code in rehype-spinner-wasat-helios npm...

EUVD-2025-112871

Malicious code in helios-uglify-js-nextjs-kaus npm...

EUVD-2025-112881

Malicious code in helios-event-carpo-apex npm...

EUVD-2025-112882

Malicious code in helios-europa-soap-europa npm...

EUVD-2025-112877

Malicious code in helios-impulse-meteor-fomalhaut npm...

EUVD-2025-121222

Malicious code in toml-convict-lyra-helios npm...

Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122559

Malicious code in rest-rate-limiter-xanadu-helios npm...

EUVD-2025-120691

Malicious code in vulcan-helios-carpo-local npm...

EUVD-2025-111842

Malicious code in leda-geckodriver-miranda-helios npm...

EUVD-2025-112888

Malicious code in helios-achernar-postcss-loader-cypress npm...