EUVD-2025-178108

Malicious code in library-bellatrix-cli-cors npm...

EUVD-2025-180159

Malicious code in babel-ophiuchus-mira-bellatrix npm...

EUVD-2025-177262

Malicious code in perseus-carina-duplex-bellatrix npm...

EUVD-2025-176665

Malicious code in rest-auriga-bellatrix-wezen npm...

EUVD-2025-178388

Malicious code in install-bunyan-bellatrix-impulse npm...

EUVD-2025-179986

Malicious code in borealis-hermes-bellatrix-geochronology npm...

EUVD-2025-180108

Malicious code in bellatrix-pulsar-bionics-cryovolcano npm...

EUVD-2025-180109

Malicious code in bellatrix-proteomics-meissa-redis npm...

EUVD-2025-177384

Malicious code in paleobotany-callback-magnetosphere-bellatrix npm...

EUVD-2025-180113

Malicious code in bellatrix-mira-europa-commitlint npm...

EUVD-2025-180118

Malicious code in bellatrix-bunyan-neptune-hydra npm...

Malicious code in bellatrix-prompts-webpack-paleobotany (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff60d248263ba8c994d0355354d6ac79aeda3be055d3bc9944a338d1820a86fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180106

Malicious code in bellatrix-websockets-filament-biohacking npm...

EUVD-2025-176803

Malicious code in radiometric-proxima-ophiuchus-bellatrix npm...

EUVD-2025-180110

Malicious code in bellatrix-prompts-webpack-paleobotany npm...

EUVD-2025-178908

Malicious code in filament-xanthus-bellatrix-phoenix npm...

EUVD-2025-179674

Malicious code in colors-rigel-bellatrix-pyxis npm...

EUVD-2025-180114

Malicious code in bellatrix-local-puppeteer-epigenetics npm...

EUVD-2025-177012

Malicious code in promise-selenium-bellatrix-mysql npm...

Malicious code in bellatrix-command-testcafe-pino-pretty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b703a2d20efa32ac0ae07b76175be8aa18b3f4ebfa944f7d27fafa977a66963 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...