EUVD-2025-124894

Malicious code in miranda-capella-electron-neptune npm...

Malicious code in cluster-neptune-phoebe-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d81a737a925c43093e9812535b6aed2ab1b2626fe41ff7c380942773a9612c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115049

Malicious code in configstore-prettier-css-loader-neptune npm...

EUVD-2025-123927

Malicious code in pavo-changelog-neptune-bellatrix npm...

Malicious code in ursa-winston-slides-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4b31dc58f491ff407cd1fd6390daa9fd901f10e866a4805223a569b09be8137 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124112

Malicious code in ophiuchus-carina-neptune-auriga npm...

EUVD-2025-120356

Malicious code in writable-neptune-figures-oauth npm...

EUVD-2025-122917

Malicious code in quito-subscription-neptune-ini npm...

EUVD-2025-115638

Malicious code in cassini-meissa-neptune-acamar npm...

EUVD-2025-111589

Malicious code in loop-geckodriver-ceres-neptune npm...

EUVD-2025-111271

Malicious code in mensa-chalk-neptune-config npm...

EUVD-2025-124534

Malicious code in neptune-unuk-fornax-event npm...

EUVD-2025-124549

Malicious code in neptune-passport-venus-zenobia npm...

EUVD-2025-120160

Malicious code in yakutsk-init-neptune-fomalhaut npm...

EUVD-2025-114919

Malicious code in cosmiconfig-neptune-public-luna npm...

EUVD-2025-121271

Malicious code in thuban-neptune-hexo-dorado npm...

EUVD-2025-120695

Malicious code in vulcan-fork-colors-neptune npm...

Malicious code in pavo-pm2-neptune-axios (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b109d7e83f56cfbd62fa42f654d8684db4936fae55b1716ecbdad25efc8f1259 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-neptune-bootes-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfe1f7cc57e5378ad22e5eddec6f8f07092ecffa0c918b156ad32967ae2ea0d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-34283

Nagios XI versions prior to 2024R1.4.2 revealed API keys to users who were not authorized for API access when using Neptune themes. An authenticated user without API privileges could view another user's or their own API key value...