EUVD-2025-179998

Malicious code in bootes-reveal-md-cache-antares npm...

MAL-2025-189823 Malicious code in taurus-bootes-jekyll-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 143f6c7625fbfb9a7c5a98d8a3fc9b941d370f32ba8cb403bd8ca68227b26de6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175568

Malicious code in weywot-wezen-bootes-nodemon npm...

EUVD-2025-180000

Malicious code in bootes-config-docusaurus-ultra npm...

EUVD-2025-179999

Malicious code in bootes-global-luna-galaxy npm...

Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113332

Malicious code in gacrux-publish-tailwindcss-bootes npm...

EUVD-2025-116026

Malicious code in bootes-despina-capella-pavo npm...

EUVD-2025-112148

Malicious code in json-bootes-ophiuchus-epimetheus npm...

Malicious code in bootes-despina-capella-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d23d6d6dd2fd50fbfb69d2a5c2e9d2d735e5bce93f882407139e9ebc1e18f011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116016

Malicious code in bootes-npm-nightwatch-despina npm...

EUVD-2025-116015

Malicious code in bootes-ophiuchus-phoenix-pyxis npm...

EUVD-2025-120885

Malicious code in ursa-bootes-fornax-norma npm...

EUVD-2025-123464

Malicious code in prettier-bootes-foundation-gacrux npm...

EUVD-2025-116018

Malicious code in bootes-nebula-cordelia-slides npm...

Malicious code in sqlite-xanthus-proxima-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2f32ccc9abe073ad5ce6305e68105a9f7b7780b19c76998a56b792af270ee0f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116033

Malicious code in bootes-aldebaran-link-tool npm...

EUVD-2025-121680

Malicious code in sqlite-xanthus-proxima-bootes npm...

EUVD-2025-123167

Malicious code in public-bootes-quito-registry npm...

Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...