EUVD-2025-122382

Malicious code in run-script-changelog-publish-canopus npm...

EUVD-2025-115731

Malicious code in canopus-vortex-fornax-warp npm...

EUVD-2025-115748

Malicious code in canopus-config-karma-dagda npm...

EUVD-2025-116281

Malicious code in axios-canopus-yildun-socketio npm...

EUVD-2025-111214

Malicious code in meteor-canopus-upgrade-eleventy npm...

EUVD-2025-121148

Malicious code in transport-canopus-ganymede-config npm...

MAL-2025-139165 Malicious code in acamar-canopus-mui-dependencies (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d4fb2afde0e9df1141200a38e0ea82bee518c42654864678f9679e55f5ee661 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139820 Malicious code in axios-canopus-kronos-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48ade41d63c7f9d1622391ff19a184cc9d7b30bf4422aa034da1f374435842c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111698

Malicious code in link-non-blocking-query-canopus npm...

EUVD-2025-122663

Malicious code in repository-canopus-csrf-stop npm...

EUVD-2025-120181

Malicious code in xo-ignite-canopus-dagda npm...

EUVD-2025-123995

Malicious code in package-canopus-cluster-grus npm...

Malicious code in xo-ignite-canopus-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0bce8256cc0e9ce5e492f8beca90f5cdb3cd66079b137e9c3bf0ea299205d58 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114757

Malicious code in csv-ora-relay-canopus npm...

EUVD-2025-115737

Malicious code in canopus-proxima-orbit-query npm...

EUVD-2025-116285

Malicious code in await-yildun-canopus-fork npm...

Malicious code in websockets-graphql-regulus-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bbbda8427ea6dbb869b1b65944d6ea5190110070e68da12643f4631637ca0a0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113027

Malicious code in grus-canopus-mutation-quantum npm...

EUVD-2025-116282

Malicious code in axios-canopus-kronos-rate-limiter npm...

Malicious code in package-canopus-cluster-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4926128f2e014bb66395c799c67566e984d3d4bc91e3d641df6ac88d39156e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...