EUVD-2025-177983

Malicious code in magellan-bootes-resonance-sedna npm...

EUVD-2025-176401

Malicious code in shelljs-fermiparadox-bootes-xml npm...

EUVD-2025-178215

Malicious code in karma-install-spectron-bootes npm...

EUVD-2025-177677

Malicious code in nebula-gulp-bootes-kastra npm...

EUVD-2025-180198

Malicious code in avior-biotechnology-supernova-bootes npm...

EUVD-2025-177897

Malicious code in mesosphere-bootes-primatology-levels npm...

MAL-2025-189823 Malicious code in taurus-bootes-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143f6c7625fbfb9a7c5a98d8a3fc9b941d370f32ba8cb403bd8ca68227b26de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186406 Malicious code in csrf-bootes-html-webpack-plugin-ichnology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 42e683c14d1e59c58cadcd514400f46ff49670101cb068cc2ecf1d95b413dcf9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179997

Malicious code in bootes-terser-local-sqlite npm...

EUVD-2025-177172

Malicious code in pino-pretty-electron-palynology-bootes npm...

EUVD-2025-175563

Malicious code in wezen-lepton-bootes-ultra npm...

EUVD-2025-180000

Malicious code in bootes-config-docusaurus-ultra npm...

MAL-2025-188778 Malicious code in postcss-loader-bootes-dotenv-parse-variables-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9fc8c8e7ddc227365def94f5bebb667a28e8286055e4184311450fd633fa2131 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179476

Malicious code in csrf-bootes-html-webpack-plugin-ichnology npm...

Malicious code in taurus-bootes-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143f6c7625fbfb9a7c5a98d8a3fc9b941d370f32ba8cb403bd8ca68227b26de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185883 Malicious code in bootes-global-luna-galaxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39b5ee17fa3aca045e1236eb3d32ce08cfc4e6572f1d9ea233fac2f7dcf653d4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-bootes-library-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd9f0955fb715756a243c13cdc75fae960ac6e5073430166849b2380a0a8aab4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179999

Malicious code in bootes-global-luna-galaxy npm...

EUVD-2025-175568

Malicious code in weywot-wezen-bootes-nodemon npm...

EUVD-2025-179998

Malicious code in bootes-reveal-md-cache-antares npm...