EUVD-2025-113691

Malicious code in farout-neptune-dione-transform npm...

Malicious code in neptune-blaze-quantum-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efb360ff687b26292e07146d452935db0438fa45682807cd664889d6edfda878 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112965

Malicious code in halley-ini-neptune-quasar npm...

EUVD-2025-122336

Malicious code in sagitta-chariklo-neptune-sirius npm...

EUVD-2025-112748

Malicious code in html-webpack-plugin-hyperion-vulcan-neptune npm...

EUVD-2025-123930

Malicious code in pavo-backend-neptune-semantic-release npm...

EUVD-2025-111515

Malicious code in lynx-superagent-neptune-venus npm...

EUVD-2025-120106

Malicious code in yildun-warp-orbit-neptune npm...

Malicious code in csv-nova-eridanus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in google-typeorm-public-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fe46e17bb922cf6b54c730f90d58ae9d373c147fc77bc4648addb1455e4fa59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-virgo-neptune-eslint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74955c1944f7289abb9767df8625bff89308a3ba20a2ce78410c61dc25ad03ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112218

Malicious code in javascript-websockets-neptune-janus npm...

EUVD-2025-113337

Malicious code in gacrux-oauth-yonder-neptune npm...

EUVD-2025-114010

Malicious code in epimetheus-mutation-google-neptune npm...

EUVD-2025-112068

Malicious code in juno-yaml-neptune-node-config npm...

EUVD-2025-120682

Malicious code in vulcan-neptune-rate-limiter-virgo npm...

EUVD-2025-120768

Malicious code in virgo-neptune-rate-limiter-cypress npm...

EUVD-2025-124542

Malicious code in neptune-request-hexo-commitlint-config-angular npm...

Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d10eed867170bdb10f37fc7c4c60669789a3178c8f7dffdd348dd2f58ae32db1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...