EUVD-2025-179402

Malicious code in darkenergy-helmet-epigenetics-leda npm...

EUVD-2025-178554

Malicious code in helmet-sagitta-saturnology-element-ui npm...

EUVD-2025-180500

Malicious code in adonis-tectonophysics-tectonic-helmet npm...

Malicious code in antares-asteroid-quantum-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06b7c61d916fabec1f02468b65e006f419ee4361732312623ac970b55b57cdc7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177414

Malicious code in orbit-publish-dynamo-helmet npm...

EUVD-2025-178559

Malicious code in helmet-geochronology-rigel-sails npm...

EUVD-2025-179452

Malicious code in csv-helmet-dione-canopus npm...

Malicious code in antares-planckscale-helmet-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f72530dd247b457218e0e4f8916ac3dc415a8a2eab4401eb9bd37f23deb50d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rate-limiter-aurora-helmet-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9633e2fd02710c31a807cef01e13aef312acd495a2495f49441b3006042bae81 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180416

Malicious code in antares-planckscale-helmet-module npm...

EUVD-2025-177306

Malicious code in passport-fornax-phenomic-helmet npm...

EUVD-2025-178913

Malicious code in figures-miranda-helmet-exec npm...

MAL-2025-188576 Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189031 Malicious code in quasar-helmet-metabolomics-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acc8a6683ea8ccf5185aeeb43f7d442aaceebb4a6daf47fbf4915551e5ce2f55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187329 Malicious code in helmet-sirius-ini-mocha (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f28596c89ad05b7cfce43316b2195edd20ec7abf4c674d1643d0d8217999fb5e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177906

Malicious code in meissa-steganography-helmet-yaml npm...

Malicious code in hydra-helmet-terser-webpack-plugin-ignite (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33dbdfc3aeaf126c1ce24cb78ecb3e956771efcf6d0cb9a2a8be189ba3b1c57c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179544

Malicious code in cosmicray-ursa-helmet-deneb npm...

EUVD-2025-175529

Malicious code in writable-lint-helmet-betelgeuse npm...

Malicious code in pavo-helmet-titan-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d76136c9f3dc8a08d2551ba3a769c56e61203352b817ce641ee74bd69da7498 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...