EUVD-2025-111295

Malicious code in meissa-orbit-bootes-javascript npm...

EUVD-2025-113797

Malicious code in event-geckodriver-orbit-weywot npm...

EUVD-2025-122274

Malicious code in sails-jabbah-pegasus-orbit npm...

Malicious code in odin-loop-orbit-mensa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25bc0f20bd252abf7728a486e9acb87f99bbda43e9c78c910ffc2f1640431f9d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

EUVD-2025-113635

Malicious code in figures-orbit-uglify-js-uglify-js npm...

EUVD-2025-112189

Malicious code in jest-forever-adonis-orbit npm...

EUVD-2025-124001

Malicious code in orbit-xml-nightwatch-chakra-ui npm...

EUVD-2025-116147

Malicious code in bellatrix-resolvers-inquirer-orbit npm...

EUVD-2025-116047

Malicious code in blitz-pegasus-convict-orbit npm...

EUVD-2025-122447

Malicious code in rocket-orbit-grus-sass-loader npm...

EUVD-2025-123084

Malicious code in pulsar-orbit-capella-indus npm...

EUVD-2025-122658

Malicious code in repository-dotenv-safe-xanthus-orbit npm...

EUVD-2025-111540

Malicious code in luna-orbit-inquirer-convict npm...

EUVD-2025-115737

Malicious code in canopus-proxima-orbit-query npm...

EUVD-2025-115002

Malicious code in cordelia-orbit-mutation-prompts npm...

Malicious code in orbit-websockets-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a56dbc69781b4006e6aa721c82d0bbf279312f49f2d28c79b0fa5f0643fe9336 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112377

Malicious code in iota-orbit-sirius-pegasus npm...

EUVD-2025-114180

Malicious code in electron-rimraf-orbit-javascript npm...

Malicious code in orbit-transport-pulsar-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d0ac9a87883bd4a5728f0a6a2441250aab1ea05641e171ea404f77c2d8eb39b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...