EUVD-2025-116779

Malicious code in alphard-express-pulsar-schema npm...

EUVD-2025-113554

Malicious code in forever-alphard-zenobia-leda npm...

EUVD-2025-116764

Malicious code in alphard-pulsar-umbriel-chakra-ui npm...

EUVD-2025-116765

Malicious code in alphard-pm2-centauri-pavo npm...

EUVD-2025-116430

Malicious code in auriga-alphard-farout-typeorm npm...

EUVD-2025-116356

Malicious code in auth0-event-winston-alphard npm...

EUVD-2025-115459

Malicious code in chalk-lynx-alphard-virgo npm...

EUVD-2025-123601

Malicious code in polaris-alphard-sequelize-atlas npm...

Malicious code in soap-taurus-alphard-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2f1d5f090be809b21c5b50628f723d4f107765b7e01ff6e0a5a790938b79adaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139374 Malicious code in andromeda-config-eslint-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97c85ea7c1863642aefcd2294c864ad7325e4f249478d498aca5a7d4f6e06a88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116769

Malicious code in alphard-odin-radiant-hapi npm...

EUVD-2025-116772

Malicious code in alphard-mongoose-ursa-gridsome npm...

EUVD-2025-116770

Malicious code in alphard-nightwatch-reveal-md-sqlite npm...

EUVD-2025-114977

Malicious code in cors-registry-cross-env-alphard npm...

EUVD-2025-112276

Malicious code in janus-style-loader-alphard-remark npm...

EUVD-2025-114220

Malicious code in electron-alphard-sedna-kastra npm...

EUVD-2025-116783

Malicious code in alphard-cassini-graphql-warp npm...

EUVD-2025-123149

Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby npm...

EUVD-2025-122965

Malicious code in quasar-query-mongoose-alphard npm...

Malicious code in helmet-cache-galaxy-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6add171345211d071a5d346b6853f2ba78d089ff05584c0fe992c0bdc87d2b10 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...