EUVD-2025-115126

Malicious code in commitlint-exec-express-perseus npm...

EUVD-2025-113806

Malicious code in event-atlas-spica-perseus npm...

EUVD-2025-116398

Malicious code in aurora-perseus-publish-protractor npm...

EUVD-2025-112540

Malicious code in indus-perseus-publish-rate-limiter npm...

EUVD-2025-121296

Malicious code in tethys-sails-perseus-gatsby npm...

EUVD-2025-123820

Malicious code in perseus-ora-non-blocking-altair npm...

EUVD-2025-113634

Malicious code in figures-perseus-auth-aquarius npm...

EUVD-2025-122000

Malicious code in shelljs-nightmare-perseus-elektra npm...

EUVD-2025-120527

Malicious code in webpack-perseus-version-hyperion npm...

EUVD-2025-114746

Malicious code in cygnus-avior-perseus-auth0 npm...

EUVD-2025-123811

Malicious code in perseus-redis-comet-eleventy npm...

EUVD-2025-114946

Malicious code in corvus-perseus-chariklo-dotenv npm...

Malicious code in spica-charon-perseus-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd19137bc29e8d26057720cd37eada1f3debb2ca67b9358bcc23f58791b8160b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116920

Malicious code in acamar-perseus-leda-cors npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121967

Malicious code in sirius-jsonp-dotenv-parse-variables-perseus npm...

EUVD-2025-123850

Malicious code in perseus-cache-remark-await npm...

Malicious code in perseus-cassini-pm2-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eecf795ed972026476c3d217f8d763e7e2c89ff111b2dcd751985e8ac5aef90e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140270 Malicious code in cache-eridanus-auth-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e2ca0649729d1dff4f07747f531200bc22904d80ebcbccf330d3a9a9072f5251 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147297 Malicious code in request-jwt-jest-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f39cb3751e045e8297b0d6151b30d73f8912bad4940b767559fb974d0ef0b19 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...