MAL-2025-188206 Malicious code in nebula-init-resolvers-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4267813674b3508d993913145c41501a2e39ab266d217f2861c06713c3b87bd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188205 Malicious code in nebula-gulp-bootes-kastra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afb6b5c7c5ee58afca59f9703c1eb66b71298f71dace2f66ef3181095fc0f2b2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179906

Malicious code in callback-jekyll-public-nebula npm...

Malicious code in aurora-exec-nebula-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 727d149233b8486494ce40ab83a3e2e4ecf442479f183b3b96baae8f80f59da2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176732

Malicious code in rehype-janus-nebula-quito npm...

EUVD-2025-177683

Malicious code in nebula-dactyl-avior-thermosphere npm...

EUVD-2025-176697

Malicious code in remark-loglevel-process-nebula npm...

EUVD-2025-178501

Malicious code in html-webpack-plugin-zenobia-nebula-antares npm...

EUVD-2025-180035

Malicious code in blazar-ganymede-nebula-bunyan npm...

EUVD-2025-178491

Malicious code in husky-bulma-nebula-concurrently npm...

EUVD-2025-175460

Malicious code in yakutsk-electron-nebula-jekyll npm...

EUVD-2025-180068

Malicious code in biohacking-hexo-nebula-non-blocking npm...

EUVD-2025-180235

Malicious code in aurora-exec-nebula-titan npm...

EUVD-2025-176884

Malicious code in pyxis-sedna-nebula-sedna npm...

EUVD-2025-176647

Malicious code in reveal-md-sirius-sequelize-nebula npm...

MAL-2025-189143 Malicious code in rehype-janus-nebula-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0b030dfe78269f05856c1d36dcfb4812704739de10c5ef8312af45bf99110f18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176412

Malicious code in server-nebula-cosmiconfig-umbra npm...

EUVD-2025-176794

Malicious code in rate-limiter-callback-nebula-electron npm...

EUVD-2025-176442

Malicious code in selenium-troposphere-nebula-betelgeuse npm...

Malicious code in geckodriver-nebula-spawn-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e0f439f3314d535195f43a58fea27de3a38211dbd7367c379d737eb31a99b2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...