MAL-2025-144543 Malicious code in loopback-bunyan-kinetic-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 464f9e02bf0e4f155da9c40199dbec9f723eab41656775a94271c27291e7effd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149576 Malicious code in writable-neptune-norma-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f525a38c1f7ae8c65e5357112ddb68d3345bc89693d22c219fab3879adf2349 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141576 Malicious code in dependencies-neptune-update-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 397b34418700a7519cb7464e8e06f7903ea7fc035617ff240992e51e6953896e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145375 Malicious code in neptune-pm2-dynamo-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43d35622544f7011462b67cefe44fe8b04c11eb5c5a970390e334010d360b20a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145379 Malicious code in neptune-shelljs-mysql-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d160095b072fe5c1f1c68de0e9a0cb000ff18e829d29172c19bac0398cc3cdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145381 Malicious code in neptune-stop-semantic-release-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 854d36ed66287193682ff19d42027a1746c092392f6048ce77b2adf23c3031f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in registry-europa-antares-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47da6a64a6a0952ceae89b41a52613eafa5aa8d8d0d973dbdffd14faf9b588b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116771

Malicious code in alphard-neptune-nashira-sqlite npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

Malicious code in mongodb-achernar-module-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41eae1a1d9e6036f757faac69de61b2bedb3d9d5a5e676a3fa82fb1634b3e068 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115638

Malicious code in cassini-meissa-neptune-acamar npm...

EUVD-2025-120418

Malicious code in winston-neptune-standard-procyon npm...

EUVD-2025-120398

Malicious code in winston-vortex-prettier-neptune npm...

EUVD-2025-120149

Malicious code in yaml-aquarius-xenos-neptune npm...

EUVD-2025-124544

Malicious code in neptune-postgres-google-ganymede npm...

EUVD-2025-122751

Malicious code in rehype-halley-dagda-neptune npm...

EUVD-2025-120076

Malicious code in zenith-neptune-puppeteer-nuxtjs npm...

EUVD-2025-124562

Malicious code in neptune-eridanus-dynamo-callback npm...

EUVD-2025-124556

Malicious code in neptune-html-webpack-plugin-subscription-typeorm npm...

Malicious code in neptune-stream-toml-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6ecdbed3d1f61979e80b7310790181fbfae8d2f3d11f3eea7493acce573c6e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...