EUVD-2025-123175

Malicious code in proxima-transport-pulsar-canopus npm...

EUVD-2025-121127

Malicious code in transport-sass-loader-csv-kaus npm...

Malicious code in nebula-bulma-transport-capella (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b901ab2b042e34d6b97c28bdbfc77d59d7599338dfb7cd5c7b18ddbb4e341a2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121238

Malicious code in titan-pegasus-transport-rocket npm...

EUVD-2025-122763

Malicious code in regulus-transport-postcss-carina npm...

EUVD-2025-124724

Malicious code in mui-apollo-transport-node-sass npm...

EUVD-2025-122960

Malicious code in quasar-transport-spinner-concurrently npm...

EUVD-2025-116545

Malicious code in aquarius-vuepress-kinetic-transport npm...

EUVD-2025-120852

Malicious code in ursa-transport-slides-corvus npm...

EUVD-2025-121148

Malicious code in transport-canopus-ganymede-config npm...

EUVD-2025-121145

Malicious code in transport-cypress-delphinus-rimraf npm...

EUVD-2025-121136

Malicious code in transport-lynx-transform-webdriver-mocha npm...

EUVD-2025-121125

Malicious code in transport-stream-nebula-phoebe npm...

EUVD-2025-112221

Malicious code in javascript-taurus-transport-xenos npm...

Malicious code in cordelia-transport-axios-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3289a4ae791252db9b0ef7245a75e3b7b6b5128e3f7303b30c771848de4c5868 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114377

Malicious code in dotenv-parse-variables-postgres-cz-conventional-changelog-transport npm...

EUVD-2025-114330

Malicious code in dotenv-safe-transport-corvus-hydra npm...

MAL-2025-146621 Malicious code in procyon-transport-antares-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0dd5e963ca95be4d275776c26fe8bbf0e69bad83e16e6477c525e3b11082bb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightwatch-phoebe-transport-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6049b5379ea044d3ce75ccf7005b859ec24b16fbbe924cf0b73dcb33211bb4c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...