EUVD-2025-114093

Malicious code in eleventy-zephyr-radiant-subscription npm...

EUVD-2025-113843

Malicious code in europa-foundation-zephyr-betelgeuse npm...

EUVD-2025-111383

Malicious code in markdownlint-zephyr-perseus-mutation npm...

EUVD-2025-120042

Malicious code in zephyr-mdx-vega-reveal-md npm...

EUVD-2025-114821

Malicious code in csrf-levels-terser-zephyr npm...

EUVD-2025-114401

Malicious code in dotenv-meissa-zephyr-kronos npm...

EUVD-2025-114431

Malicious code in docusaurus-standard-octans-zephyr npm...

EUVD-2025-111786

Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr npm...

EUVD-2025-121556

Malicious code in subscription-zephyr-exec-pegasus npm...

Malicious code in jabbah-chariklo-odin-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3c2d50e67cbc5f2bb004a64214b90e5ef969a05f10b98fa932df4236c8f8ace This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123292

Malicious code in procyon-zephyr-gacrux-fork npm...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146225 Malicious code in pino-middleware-zephyr-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54d06a3a7b8dcf2aafa9df282862719f4c6d00a49414d8b4e87a1b0f1b729ba2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144576 Malicious code in luna-pegasus-nconf-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d0fa455b2059614d207d686005cf0890c87f2061d148044477b6e8eafff85443 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in zephyr-lynx-stop-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 198e05e3ff5f3efe1c27864a86183b3a8341b6df02cd8b7e97369ce5dd3f42d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142247 Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3de003ad5beff2831f64a6b34d25377bdabc07ac8babbabbe04176801ae9094b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113863

Malicious code in eslint-plugin-zephyr-xenos-betelgeuse npm...

EUVD-2025-113904

Malicious code in eslint-config-prettier-plugin-markdown-zephyr-airbnb npm...

EUVD-2025-120039

Malicious code in zephyr-quito-barnard-mui npm...

MAL-2025-143027 Malicious code in gravity-jabbah-magellan-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5229ad0bb0abdb1698460191f585f244fb025a2accd69fcc65785d3005ed69d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...