EUVD-2025-177613

Malicious code in nextjs-shelljs-centaurus-singularity npm...

EUVD-2025-176399

Malicious code in shelljs-test-mira-neptune npm...

EUVD-2025-176553

Malicious code in sagitta-shelljs-halley-grunt npm...

EUVD-2025-176956

Malicious code in proxima-shelljs-spinner-brane npm...

EUVD-2025-175830

Malicious code in umbriel-gulp-sqlite-shelljs npm...

EUVD-2025-177080

Malicious code in prettier-despina-gacrux-shelljs npm...

EUVD-2025-176455

Malicious code in sedna-shelljs-tailwindcss-photon npm...

EUVD-2025-180126

Malicious code in baryon-sublimation-apollo-shelljs npm...

EUVD-2025-179335

Malicious code in deneb-juno-telesto-shelljs npm...

EUVD-2025-176400

Malicious code in shelljs-package-writable-jabbah npm...

MAL-2025-189475 Malicious code in shelljs-package-writable-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f60830a143e445f6febb17ec8af079069f1883139d63dfad0461f1d08e9008a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177377

Malicious code in paleoceanography-shelljs-umbriel-galaxy npm...

MAL-2025-188919 Malicious code in proxima-shelljs-spinner-brane (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7bd32ce89463fc87f2bf996cd96de28e6fa265c87a586e1414a63e912a88fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123000

Malicious code in quark-colors-auth0-shelljs npm...

EUVD-2025-116203

Malicious code in backend-yildun-fornax-shelljs npm...

EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122014

Malicious code in shelljs-bootes-regulus-sedna npm...

Malicious code in remark-shelljs-phoenix-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4e1017c23cd53607be3402508b6ffbe4c1cd96616b24e3103727f4e6ff2d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113817

Malicious code in europa-start-shelljs-chromedriver npm...