EUVD-2025-121179

Malicious code in tool-proxima-shelljs-corvus npm...

EUVD-2025-122016

Malicious code in shelljs-airbnb-morgan-protractor npm...

EUVD-2025-124435

Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa npm...

EUVD-2025-113718

Malicious code in express-titan-andromeda-shelljs npm...

EUVD-2025-115682

Malicious code in carina-rocket-shelljs-rimraf npm...

EUVD-2025-124657

Malicious code in mysql-pm2-ceres-shelljs npm...

EUVD-2025-112618

Malicious code in hyperion-pino-pretty-levels-shelljs npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122008

Malicious code in shelljs-hydra-element-ui-supervisor npm...

Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114310

Malicious code in draco-wasat-neptune-shelljs npm...

MAL-2025-139197 Malicious code in achernar-geckodriver-element-ui-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6f1253be5da971749704f5a0ca7b1672c8b75855e91d121c249fea900dfd15d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147913 Malicious code in shelljs-farout-indus-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73d33e3ffe2787112ac2001ee15ede2dc2229ab29e8c9e967d06ea9ab158c0c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147927 Malicious code in shelljs-sagitta-forever-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8520a636888d2b5c6bf4dc6d1cfb48b131a6cb2490a7d3d5ada301ab554f0e6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111745

Malicious code in levels-yaml-build-shelljs npm...

EUVD-2025-116563

Malicious code in aquarius-markdownlint-shelljs-arcturus npm...

MAL-2025-143644 Malicious code in inquirer-cosmos-sqlite-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62bc7f48dbc1cbcc3b88ab693e3d514765eb32df9b7bd5a8c673dbe9e7371df5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122002

Malicious code in shelljs-mongodb-eridanus-gemini npm...

MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...