EUVD-2025-112873

Malicious code in helios-quasar-karma-webdriver-mocha npm...

EUVD-2025-112870

Malicious code in helios-vuetify-deneb-nebula npm...

EUVD-2025-114466

Malicious code in dione-cluster-hexo-helios npm...

EUVD-2025-114275

Malicious code in dynamo-parcel-helios-centauri npm...

EUVD-2025-116279

Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios npm...

EUVD-2025-116006

Malicious code in bootstrap-arcturus-helios-pino npm...

Malicious code in helios-odin-start-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6db7425d137324f44c522d980f0e97d5761901d2847c2349c5a0b5321bb8f47c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115660

Malicious code in carpo-kinetic-capella-helios npm...

EUVD-2025-114458

Malicious code in dione-subscription-winston-helios npm...

MAL-2025-143228 Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124242

Malicious code in npm-helios-nuxtjs-gridsome npm...

EUVD-2025-112871

Malicious code in helios-uglify-js-nextjs-kaus npm...

EUVD-2025-114071

Malicious code in enceladus-ultra-promise-helios npm...

EUVD-2025-120691

Malicious code in vulcan-helios-carpo-local npm...

EUVD-2025-115663

Malicious code in carpo-ignite-electron-helios npm...

EUVD-2025-120971

Malicious code in uninstall-helios-geckodriver-cressida npm...

EUVD-2025-123714

Malicious code in pino-achernar-helios-perseus npm...

EUVD-2025-115532

Malicious code in ceres-rollup-warp-helios npm...

Malicious code in carpo-ignite-electron-helios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7b7c30af3b3626ed4d0c18eee5818fbc188b087d67563e7607290b27fe3b630 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in helios-configstore-orbit-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c3df2929912d909d21c9c5c9667a29fb56ea616c1d8cfbf3d46ad1dd457f1e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...