EUVD-2025-112349

Malicious code in izar-subscription-bootes-kinetic npm...

EUVD-2025-116024

Malicious code in bootes-electron-builder-ariel-enceladus npm...

EUVD-2025-122565

Malicious code in rest-nebula-apollo-bootes npm...

EUVD-2025-123985

Malicious code in package-leda-regulus-bootes npm...

EUVD-2025-116017

Malicious code in bootes-nestjs-heka-gridsome npm...

EUVD-2025-116021

Malicious code in bootes-install-impulse-phenomic npm...

EUVD-2025-116011

Malicious code in bootes-sagitta-sync-sirius npm...

EUVD-2025-116018

Malicious code in bootes-nebula-cordelia-slides npm...

EUVD-2025-121750

Malicious code in spica-publish-bootes-odin npm...

Malicious code in meissa-cordelia-ursa-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 131c53abda90b59bac2d95c26135113d7fdc21f8cd455eef5df21ac017aa8f5b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-sadr-epimetheus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7187ed92b4f0fa96ef7df782f26c59bcdeb9ee008077d0be627c6ee0307554 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-nestjs-heka-gridsome (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d4b4f01f46a46db96df07924ef3f869689ca6569af12e3d03bf1c55fd5e9340 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in bootes-request-meteor-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d74d0fc73bb54021a4f5141e63b670b81c2ccda4934aae6ce89637143d45c180 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116023

Malicious code in bootes-enceladus-gulp-antares npm...

EUVD-2025-111690

Malicious code in link-server-bootes-spawn npm...

EUVD-2025-124750

Malicious code in morgan-backend-bootes-selenium npm...

EUVD-2025-114521

Malicious code in dependencies-venus-install-bootes npm...

EUVD-2025-120289

Malicious code in xenon-bootes-local-bulma npm...

EUVD-2025-116032

Malicious code in bootes-algol-promise-spinner npm...

Malicious code in izar-subscription-bootes-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86ba89f2afe2abd83731c67d220a62e287593d581993edd712cd5d34c8dea79d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...