EUVD-2025-124010

Malicious code in orbit-pegasus-sync-shelljs npm...

Malicious code in scorpius-shelljs-jekyll-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 206761eea86e0acc5e9e66bb149cf3e1e19395ab125b5a7270552f20ea581f6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124541

Malicious code in neptune-shelljs-mysql-local npm...

EUVD-2025-113718

Malicious code in express-titan-andromeda-shelljs npm...

EUVD-2025-123110

Malicious code in publish-schema-scorpius-shelljs npm...

EUVD-2025-120269

Malicious code in xenon-shelljs-chariklo-loglevel npm...

EUVD-2025-111179

Malicious code in meteor-shelljs-miranda-oauth npm...

EUVD-2025-123184

Malicious code in proxima-shelljs-rate-limiter-standard npm...

EUVD-2025-122001

Malicious code in shelljs-nestjs-orbit-release-it npm...

EUVD-2025-113163

Malicious code in global-shelljs-socketio-passport npm...

EUVD-2025-122012

Malicious code in shelljs-csv-antares-changelog npm...

EUVD-2025-113817

Malicious code in europa-start-shelljs-chromedriver npm...

EUVD-2025-122666

Malicious code in remark-shelljs-phoenix-sedna npm...

EUVD-2025-124573

Malicious code in nebula-meissa-shelljs-local npm...

EUVD-2025-121179

Malicious code in tool-proxima-shelljs-corvus npm...

EUVD-2025-122007

Malicious code in shelljs-install-shelljs-proxima npm...

EUVD-2025-121998

Malicious code in shelljs-procyon-jsonp-nova npm...

Malicious code in quark-colors-auth0-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ba7f415d5cb37f209299599f124041b0707adad331912f2dfd0d7ca5470e4b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in delphinus-ariel-apex-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b947a9067e09e6ea0296b684556baf143d2ae93eb8a8041dc79efe79f7e54ef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...