EUVD-2025-121953

Malicious code in sirius-repository-yaml-oberon npm...

EUVD-2025-120743

Malicious code in vortex-octans-adonis-sirius npm...

EUVD-2025-121969

Malicious code in sirius-html-webpack-plugin-izar-europa npm...

EUVD-2025-124753

Malicious code in mongoose-sirius-bellatrix-pm2 npm...

EUVD-2025-113030

Malicious code in grus-avior-sirius-postcss npm...

EUVD-2025-124879

Malicious code in miranda-jabbah-sirius-google npm...

Malicious code in flare-gridsome-sirius-ini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27d4b1fe500ee2effe967bf7ba30e6d290cc8f00e8f726d25fa86929dd3669d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115309

Malicious code in cli-geckodriver-sirius-winston npm...

EUVD-2025-121970

Malicious code in sirius-gulp-playwright-jovian npm...

EUVD-2025-112011

Malicious code in karma-dependencies-geckodriver-sirius npm...

EUVD-2025-115848

Malicious code in bunyan-sirius-nashira-winston npm...

EUVD-2025-123806

Malicious code in perseus-sirius-proxima-elektra npm...

EUVD-2025-124271

Malicious code in norma-sirius-phoebe-jovian npm...

Malicious code in sirius-gatsby-subscription-nodemon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f9893a805326d97966c1675d8e4b2a711528e8eaa5a954e8ff750210898f55a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121964

Malicious code in sirius-loop-axios-hydra npm...

EUVD-2025-120200

Malicious code in xml-non-blocking-unuk-sirius npm...

EUVD-2025-123073

Malicious code in pulsar-zenobia-sirius-callback npm...

Malicious code in lyra-buffer-sirius-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b52588d74bb90999914f87139a9d767c0c09748794ac5b8677d02a3e90b2a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polaris-postgres-sirius-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 82373122ee604abaee242d6a3b9066cc00cc9cb1d105b6ac45a37f2ef52b6ec1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...