EUVD-2025-113198

Malicious code in gemini-pulsar-sadr-testcafe npm...

EUVD-2025-123075

Malicious code in pulsar-xml-nextjs-eleventy npm...

EUVD-2025-121499

Malicious code in sync-pulsar-child-process-gridsome npm...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

Malicious code in upgrade-prettier-plugin-markdown-capella-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 731ed6d0ba1d862841f5a8bef326ce13d517ba36801ff1fa33fc2b104643f807 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123073

Malicious code in pulsar-zenobia-sirius-callback npm...

Malicious code in radiant-vuetify-pulsar-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd5c4b7e2c2de1ea070292038e89f90d1b8687fb1eb1ead236ee6a082436ce7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-pulsar-config-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6165b6024805b3adc5e2199016ba077ca2901335befbde30b4f24903628994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gemini-pulsar-sadr-testcafe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6beda36d4c0266c1651e7f0b36b409a3b3136c7728447a6ddd5d69b184eed849 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124187

Malicious code in oauth-inquirer-farout-pulsar npm...

EUVD-2025-111931

Malicious code in kinetic-pulsar-nashira-equinox npm...

EUVD-2025-122912

Malicious code in radiant-chai-mocha-pulsar npm...

EUVD-2025-121498

Malicious code in sync-pulsar-sequelize-framework npm...

EUVD-2025-116085

Malicious code in blaze-antd-halley-pulsar npm...

Malicious code in venus-parcel-markdown-pdf-pulsar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21d77e33fa6ab5a9f2a3b96a855635c489b92850c24dbce745e25844b9ea32b3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111189

Malicious code in meteor-pulsar-prompts-test npm...

EUVD-2025-123080

Malicious code in pulsar-radiant-cypress-dione npm...

EUVD-2025-123625

Malicious code in pm2-draco-pulsar-yildun npm...

EUVD-2025-123251

Malicious code in prompts-nashira-pulsar-jekyll npm...

MAL-2025-146826 Malicious code in pulsar-astro-backend-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d277a175b4a65c1eeea5e6256ad1133633eeda9595eba61ab39084720699e6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...