EUVD-2025-180526

Malicious code in ablation-rigel-phoenix-despina npm...

Malicious code in phoenix-cache-dione-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c61ea44437b917008ecbd1d94b0404d4d54de209060e2a6548bfe2374ef498e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178908

Malicious code in filament-xanthus-bellatrix-phoenix npm...

EUVD-2025-177197

Malicious code in phoenix-eleventy-io-radiant npm...

EUVD-2025-177975

Malicious code in magellan-vega-phoenix-hydrogeology npm...

EUVD-2025-177195

Malicious code in phoenix-perseus-mocha-html-webpack-plugin npm...

MAL-2025-188682 Malicious code in phoenix-cache-dione-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c61ea44437b917008ecbd1d94b0404d4d54de209060e2a6548bfe2374ef498e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-puppeteer-phoenix-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 374bf3eeca6aa7f97f05cedd4268ceca21f16e8c36c450cb4fa2c17ac2ffd1ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ablation-rigel-phoenix-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4722a4aa3a2d3eabaa640988d1bb56407667f8dce22d649488a5c01657467d86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186861 Malicious code in ethology-phoenix-unuk-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 559be27cfb1ab2f6c01cd82e42610f9bb22a82253b37efdce765d9ca8e93c5ad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175447

Malicious code in yaml-phoenix-sequelize-redshift npm...

EUVD-2025-178419

Malicious code in inflation-antd-dependencies-phoenix npm...

EUVD-2025-175574

Malicious code in weywot-phoenix-betelgeuse-janus npm...

EUVD-2025-179021

Malicious code in ethology-phoenix-unuk-tailwindcss npm...

EUVD-2025-177196

Malicious code in phoenix-nova-pulsar-rigel npm...

EUVD-2025-180135

Malicious code in barnard-kronos-rate-limiter-phoenix npm...

EUVD-2025-176282

Malicious code in spawn-auth0-less-loader-phoenix npm...

EUVD-2025-177198

Malicious code in phoenix-cache-dione-package npm...

EUVD-2025-175424

Malicious code in zenobia-mdx-phoenix-kronos npm...

MAL-2025-186461 Malicious code in dactyl-phoenix-rest-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfb399e61ec78cd7d61dde7ece649155031041bfc66b022c9f0ef12e3b509ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...