Malicious Package

Overview bellatrix-gulp-barnard-dagda is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-175416

Malicious code in zephyr-barnard-troposphere-nucleosynthesis npm...

EUVD-2025-176231

Malicious code in standard-barnard-quark-yildun npm...

EUVD-2025-175503

Malicious code in xenon-prettier-plugin-markdown-csv-barnard npm...

EUVD-2025-177161

Malicious code in pipe-auth0-barnard-tool npm...

EUVD-2025-176706

Malicious code in remark-barnard-commitlint-loop npm...

EUVD-2025-176688

Malicious code in repository-repository-nconf-barnard npm...

EUVD-2025-176610

Malicious code in rocket-vortex-nebula-barnard npm...

EUVD-2025-178412

Malicious code in ini-barnard-juno-shelljs npm...

EUVD-2025-178245

Malicious code in juno-pyxis-barnard-perturbation npm...

EUVD-2025-180135

Malicious code in barnard-kronos-rate-limiter-phoenix npm...

EUVD-2025-180132

Malicious code in barnard-soap-gravitationalwave-meissa npm...

EUVD-2025-180115

Malicious code in bellatrix-gulp-barnard-dagda npm...

EUVD-2025-177877

Malicious code in metalsmith-antares-barnard-yildun npm...

EUVD-2025-177315

Malicious code in parsec-barnard-indus-vuepress npm...

Malicious code in parsec-barnard-indus-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175801

Malicious code in update-barnard-rigel-readable npm...

MAL-2025-189326 Malicious code in sagitta-wolf-barnard-geckodriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 087da970166c0f101f1d299c7a994960afe6bf59968564c9c7b8f32b29c733d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189169 Malicious code in remark-barnard-commitlint-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78fbc8f80c4eaa1b4e6c6d18faaabd90528b2cd1b8a5e7b7f6333164c23b83cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185749 Malicious code in barnard-perseus-comet-chromedriver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6eebdf9f0730fb227de48935bda8ce5464b39db7760ccf5d354d4599c57b658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...