EUVD-2025-116025

Malicious code in bootes-docusaurus-europa-changelog npm...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116239

Malicious code in babel-iota-command-bootes npm...

EUVD-2025-116007

Malicious code in bootes-vulcan-transport-lynx npm...

EUVD-2025-114575

Malicious code in deneb-bootes-postcss-webdriver-mocha npm...

Malicious code in xenon-bootes-local-bulma (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e1ecdb72de6b1e69ec858424fdc0d8d7ae8020b292dde4fbc821fd802480490 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in winston-bootes-package-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d3336ff67090dc4e941107022c3b2fe2463843101ef8cf3a59afd5e4401b546 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123780

Malicious code in phoebe-bootes-aquarius-sqlite npm...

EUVD-2025-116023

Malicious code in bootes-enceladus-gulp-antares npm...

EUVD-2025-113121

Malicious code in got-umbriel-bootes-init npm...

Malicious code in bootes-browserify-browserify-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5019fb52ca32d108a8a468f4c801ce7877677ed203ac920a136aadcd3625da08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116012

Malicious code in bootes-sadr-epimetheus-module npm...

EUVD-2025-111295

Malicious code in meissa-orbit-bootes-javascript npm...

EUVD-2025-116031

Malicious code in bootes-betelgeuse-forever-xml npm...

Malicious code in bootes-request-meteor-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74d0fc73bb54021a4f5141e63b670b81c2ccda4934aae6ce89637143d45c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140071 Malicious code in bootes-betelgeuse-forever-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f642659a1b6ce09ff66cc79760e53f20dc42e315da65407b73126e5b9842d69b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121750

Malicious code in spica-publish-bootes-odin npm...

EUVD-2025-112147

Malicious code in json-bootes-spectron-pegasus npm...

EUVD-2025-116014

Malicious code in bootes-postgres-module-ursa npm...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...