MAL-2025-140138 Malicious code in browserify-quantum-puppeteer-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0001b5e1e083b4a1f3972c69957ff451588428b9242c25d7a98c437e15664135 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124722

Malicious code in mui-carpo-publish-neptune npm...

EUVD-2025-121881

Malicious code in socketio-adonis-neptune-reveal-md npm...

EUVD-2025-116594

Malicious code in apollo-elektra-bellatrix-neptune npm...

EUVD-2025-124552

Malicious code in neptune-morgan-firebase-aquarius npm...

EUVD-2025-111589

Malicious code in loop-geckodriver-ceres-neptune npm...

EUVD-2025-115933

Malicious code in buffer-semantic-ui-neptune-aurora npm...

EUVD-2025-124798

Malicious code in mongodb-achernar-module-neptune npm...

EUVD-2025-111932

Malicious code in kinetic-pino-pretty-centauri-neptune npm...

EUVD-2025-124546

Malicious code in neptune-playwright-spinner-charon npm...

EUVD-2025-124568

Malicious code in neptune-aurora-backend-rollup-plugin npm...

Malicious code in neptune-kaus-xanthus-xanadu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fed4bc4106be635c7d21bb98b4b77053a3e5766f1ebd1ecbddac9415f6f11f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122269

Malicious code in sails-neptune-scripts-auth0 npm...

MAL-2025-145991 Malicious code in pavo-backend-neptune-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f009fc94282448f94d549e5083edd53f17a564701a16a40d3fe4789833cff28 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124550

Malicious code in neptune-nuxtjs-axios-run-script npm...

MAL-2025-146440 Malicious code in postgres-neptune-bootes-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe1f7cc57e5378ad22e5eddec6f8f07092ecffa0c918b156ad32967ae2ea0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144197 Malicious code in koa-neptune-slidev-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ca591866a0d3e7083a8e6c41f35814d002fc420eefffdc1e60ff6f99becf00b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145362 Malicious code in neptune-fornax-miranda-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25e546f80e3630052ab9e9536f8ee2827f28cb7a9bfcdf8362f0330a310ed9b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147874 Malicious code in sequelize-neptune-await-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abc82087e1ae03780085eb9f9224d3323f0d27a4b7a3782ee393c109ab082532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...