EUVD-2025-120174

Malicious code in xo-sirius-cors-canopus npm...

EUVD-2025-115215

Malicious code in comet-tethys-phoebe-canopus npm...

EUVD-2025-123048

Malicious code in pyxis-cypress-chromedriver-canopus npm...

EUVD-2025-121169

Malicious code in transform-commitlint-config-angular-procyon-canopus npm...

EUVD-2025-120507

Malicious code in websockets-graphql-regulus-canopus npm...

EUVD-2025-122663

Malicious code in repository-canopus-csrf-stop npm...

EUVD-2025-115742

Malicious code in canopus-lint-altair-cross-env npm...

EUVD-2025-115864

Malicious code in bunyan-canopus-kinetic-carpo npm...

Malicious code in canopus-ini-carpo-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cb5be968ca0d94f6e02b8d6c96a37621dce07de08d5bde7184663b619ec78cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115730

Malicious code in canopus-writable-acamar-sirius npm...

EUVD-2025-115732

Malicious code in canopus-spawn-quito-cassini npm...

EUVD-2025-113639

Malicious code in figures-lacerta-ceres-canopus npm...

EUVD-2025-111214

Malicious code in meteor-canopus-upgrade-eleventy npm...

EUVD-2025-121316

Malicious code in tethys-canopus-altair-docusaurus npm...

MAL-2025-145213 Malicious code in mui-stream-jovian-canopus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f20405740772ce181d90facccd90c40f356cecd0738d253ea147949d065bcedd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140364 Malicious code in canopus-lint-altair-cross-env (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd67e9b012ad5296821bec49dbaacc8d0ba854d8356cd572e855d31cd9bcd94f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115472

Malicious code in chalk-draco-wezen-canopus npm...

EUVD-2025-121822

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-122419

Malicious code in rollup-mui-canopus-phoenix npm...

Malicious code in package-canopus-cluster-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4926128f2e014bb66395c799c67566e984d3d4bc91e3d641df6ac88d39156e62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...