EUVD-2025-177822

Malicious code in mira-pegasus-helios-command npm...

EUVD-2025-178458

Malicious code in ignite-chai-mira-neptune npm...

EUVD-2025-178137

Malicious code in lepton-weywot-mira-pino-pretty npm...

EUVD-2025-180356

Malicious code in archaeometry-airbnb-mira-ophiuchus npm...

EUVD-2025-180159

Malicious code in babel-ophiuchus-mira-bellatrix npm...

EUVD-2025-180113

Malicious code in bellatrix-mira-europa-commitlint npm...

EUVD-2025-177819

Malicious code in mira-wolf-prompts-got npm...

EUVD-2025-177821

Malicious code in mira-pino-impulse-adonis npm...

EUVD-2025-179629

Malicious code in commitlint-config-angular-sadr-cluster-mira npm...

EUVD-2025-176399

Malicious code in shelljs-test-mira-neptune npm...

EUVD-2025-177823

Malicious code in mira-halley-halley-publish npm...

EUVD-2025-177825

Malicious code in mira-flare-xanadu-pavo npm...

MAL-2025-188058 Malicious code in mira-fusion-yildun-css-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6df0ea3944c62f78d72d9a701c0e41295455162fe1dc8975371c9456810d08b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177824

Malicious code in mira-fusion-yildun-css-loader npm...

EUVD-2025-177531

Malicious code in nova-astro-playwright-mira npm...

Malicious code in chalk-mira-procyon-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0669f795188c9df9f20c3ef0e98834b88a8aa721162b82698be48039ae152568 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175842

Malicious code in ultra-mira-centaurus-io npm...

EUVD-2025-176877

Malicious code in quantum-computing-mira-volcanology-sublimation npm...

EUVD-2025-177714

Malicious code in nanotechnology-nightwatch-elara-mira npm...

MAL-2025-185769 Malicious code in bellatrix-mira-europa-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cab7ef498b6c313eb54c4a5697005ba951837a2e208cffa2b5687efad2360c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...