EUVD-2025-123481

Malicious code in postgres-neptune-bootes-query npm...

EUVD-2025-116612

Malicious code in apollo-acamar-babel-neptune npm...

EUVD-2025-111271

Malicious code in mensa-chalk-neptune-config npm...

Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124551

Malicious code in neptune-mui-jasmine-sync npm...

EUVD-2025-115619

Malicious code in castor-markdownlint-semantic-ui-neptune npm...

EUVD-2025-120219

Malicious code in xerxes-ora-neptune-dotenv npm...

Malicious code in vulcan-fork-colors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 902b014ef02bf4a89bd5777fe120aaf8ffb901c0b2721470f49bba8874914733 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112763

Malicious code in hexo-procyon-neptune-spectron-webdriver npm...

EUVD-2025-122618

Malicious code in request-neptune-meissa-xo npm...

Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112665

Malicious code in hydra-neptune-ursa-jest npm...

MAL-2025-145369 Malicious code in neptune-mui-jasmine-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd1df8a6d2bc023876d443ab956c891fa6eed3e890a12c4ae30e21b71e81c3f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142600 Malicious code in fork-start-node-sass-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38573d99689c86b79d69bf0aab74958277241d2f0c883b63abcc8d803cbd42d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120907

Malicious code in upgrade-neptune-arcturus-wolf npm...

MAL-2025-146871 Malicious code in pyxis-charon-neptune-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 556ddeb88bf7a9fddf1bae3466a20bdfd45f4c606551a5622a2d5157c1b8e689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146338 Malicious code in polaris-equinox-envconfig-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e6a382237b08b549bc7eda0f326619bb3126d3117d0fa08b614a2f7c628fc0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148334 Malicious code in style-loader-neptune-taurus-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a4c90da9164ea2ee6d2e60d2ac1a6098266e9489620764bc8ce379afa7aed2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147177 Malicious code in rehype-neptune-buffer-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c99f96519afc0372b2dea505b8c770086ade6f53b8d09c6710009b159b9c71f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...