EUVD-2025-121469

Malicious code in taurus-apollo-postgres-colors npm...

EUVD-2025-123480

Malicious code in postgres-neptune-start-run-script npm...

EUVD-2025-111486

Malicious code in magellan-cosmiconfig-postgres-webdriver-manager npm...

EUVD-2025-112899

Malicious code in heka-postgres-update-publish npm...

EUVD-2025-123486

Malicious code in postgres-hydra-weywot-sagitta npm...

MAL-2025-140088 Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123559

Malicious code in polaris-postgres-sirius-ursa npm...

EUVD-2025-113760

Malicious code in exec-markdown-pdf-lyra-postgres npm...

EUVD-2025-123479

Malicious code in postgres-pavo-tool-procyon npm...

EUVD-2025-124440

Malicious code in nightwatch-postgres-forever-gemini npm...

MAL-2025-140363 Malicious code in canopus-leda-postgres-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16592b4ce6c067b6870d21abaf030dffb146d291061175fd9639b09e183061f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113265

Malicious code in gatsby-postgres-eridanus-bellatrix npm...

EUVD-2025-116940

Malicious code in acamar-aether-bunyan-postgres npm...

EUVD-2025-124042

Malicious code in ora-dotenv-safe-nodemon-postgres npm...

MAL-2025-143032 Malicious code in gravity-xenos-postgres-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9928cc50e6689771dd7021790880d27ee8c24b1425bb75d7acd7ba4a3bd17331 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123489

Malicious code in postgres-geckodriver-less-loader-quark npm...

Malicious code in auth0-forever-postgres-koa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 269b82056a31b43b01d8c289b59dd98b00ce4269e59a1eb05e83db7933f8f3fc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in levels-telesto-eslint-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d1fd5512ebe9aed61c95cdb2a46351fb6ae9e0896e25cb5cff408c9dbb7ef3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postgres-pavo-tool-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd2addda10f23ed7cb19188abda0a250d743d2adbdd413ab1c73bcc665ff6803 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...