EUVD-2025-123352

Malicious code in process-shelljs-neptune-taurus npm...

EUVD-2025-122182

Malicious code in scripts-neptune-sails-ganymede npm...

EUVD-2025-124548

Malicious code in neptune-phoebe-geckodriver-wasat npm...

EUVD-2025-123259

Malicious code in prompts-elara-neptune-middleware npm...

EUVD-2025-124533

Malicious code in neptune-unuk-taurus-ganymede npm...

EUVD-2025-113745

Malicious code in express-antares-neptune-gravity npm...

EUVD-2025-113097

Malicious code in graphql-webdriverio-neptune-phenomic npm...

Malicious code in sails-neptune-scripts-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9a8c4d785880a4830371576fc6fc390a6d9f398e94cd295857726be3b82befd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120135

Malicious code in yaml-neptune-pino-barnard npm...

EUVD-2025-121591

Malicious code in style-loader-neptune-taurus-gatsby npm...

EUVD-2025-113691

Malicious code in farout-neptune-dione-transform npm...

Malicious code in neptune-blaze-quantum-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb360ff687b26292e07146d452935db0438fa45682807cd664889d6edfda878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112965

Malicious code in halley-ini-neptune-quasar npm...

EUVD-2025-122336

Malicious code in sagitta-chariklo-neptune-sirius npm...

EUVD-2025-123930

Malicious code in pavo-backend-neptune-semantic-release npm...

EUVD-2025-111515

Malicious code in lynx-superagent-neptune-venus npm...

EUVD-2025-120106

Malicious code in yildun-warp-orbit-neptune npm...

Malicious code in csv-nova-eridanus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...