EUVD-2025-116154

Malicious code in bellatrix-oberon-prettier-alphard npm...

EUVD-2025-123261

Malicious code in prompts-chromedriver-protractor-alphard npm...

EUVD-2025-116769

Malicious code in alphard-odin-radiant-hapi npm...

EUVD-2025-124248

Malicious code in npm-alphard-mongodb-nodemon npm...

EUVD-2025-121586

Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin npm...

EUVD-2025-113554

Malicious code in forever-alphard-zenobia-leda npm...

EUVD-2025-116828

Malicious code in aldebaran-elektra-alphard-vuepress npm...

EUVD-2025-116759

Malicious code in alphard-writable-enceladus-webdriverio npm...

EUVD-2025-116787

Malicious code in alphard-altair-jupiter-stop npm...

EUVD-2025-120898

Malicious code in upgrade-sequelize-mensa-alphard npm...

EUVD-2025-116778

Malicious code in alphard-fetch-corvus-command npm...

EUVD-2025-111729

Malicious code in library-prettier-plugin-markdown-alphard-betelgeuse npm...

Malicious code in alphard-superagent-antares-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf2031cddbc5978edd7175e265db1b17377473bce5d6cf2b5e972cf82573504 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123602

Malicious code in polaris-aether-andromeda-alphard npm...

EUVD-2025-120581

Malicious code in webdriver-mocha-geckodriver-alphard-spica npm...

Malicious code in polaris-alphard-sequelize-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7988b1f08d0bc2a590a8e320ec2c4eeee3fd6b264506c79c02671ab18b9c5481 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-deimos-alphard-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 609a60f40b01a97efcb02a7584a1a7d432187475a497e25843e25b5ed3c01d39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111663

Malicious code in lint-staged-deimos-alphard-sirius npm...

EUVD-2025-116760

Malicious code in alphard-test-dactyl-buffer npm...

EUVD-2025-124793

Malicious code in mongodb-dotenv-transform-alphard npm...