EUVD-2025-124172

Malicious code in oberon-nebula-thuban-upgrade npm...

EUVD-2025-116678

Malicious code in antares-nebula-webdriver-mocha-gravity npm...

EUVD-2025-121002

Malicious code in umbra-nebula-metalsmith-gatsby npm...

EUVD-2025-112206

Malicious code in jekyll-javascript-draco-nebula npm...

Malicious code in astro-request-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0615cdf2e022eb8e309a233fa7d06b1ed30941236bf8c92a29027db49a27c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124580

Malicious code in nebula-duplex-nightwatch-materialize npm...

EUVD-2025-115592

Malicious code in celeste-nebula-less-loader-build npm...

EUVD-2025-111259

Malicious code in mensa-janus-chalk-nebula npm...

EUVD-2025-122393

Malicious code in rollup-plugin-zenobia-cypress-nebula npm...

EUVD-2025-115454

Malicious code in chalk-procyon-nebula-lint npm...

EUVD-2025-121125

Malicious code in transport-stream-nebula-phoebe npm...

Malicious code in nebula-cassini-meissa-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b64615720f06f661a16a29fb070139c4ae20bbb8d4fc0453a92394d279176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116867

Malicious code in aether-nebula-sequelize-readable npm...

EUVD-2025-123761

Malicious code in phoebe-mensa-nebula-unuk npm...

EUVD-2025-120834

Malicious code in vega-nebula-gacrux-sqlite npm...

EUVD-2025-115635

Malicious code in cassini-nebula-sequelize-tool npm...

EUVD-2025-121987

Malicious code in sirius-ceres-fornax-nebula npm...

Malicious code in package-antares-selenium-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79c6aa8e6019e1ce2f7b72a55bb1639c2e4c68449fa2efa5c3e3be6054c8114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123432

Malicious code in prettier-plugin-markdown-nebula-indus-dependencies npm...

Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...