EUVD-2025-111925

Malicious code in koa-cassini-eclipse-lint-staged npm...

EUVD-2025-121154

Malicious code in transform-start-halley-cassini npm...

EUVD-2025-111975

Malicious code in kaus-cassini-pulsar-tool npm...

EUVD-2025-120301

Malicious code in xanthus-lint-staged-blaze-cassini npm...

EUVD-2025-115649

Malicious code in cassini-barnard-postcss-odin npm...

EUVD-2025-123462

Malicious code in prettier-cassini-epimetheus-websockets npm...

EUVD-2025-114695

Malicious code in cz-conventional-changelog-cassini-websockets-tethys npm...

Malicious code in cassini-hyperion-fusion-postcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5a1954d8bff61dbdd15f863a66288338f3f7e1bc2f81afc76343916f9a31925 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116910

Malicious code in achernar-cassini-antares-meissa npm...

Malicious code in procyon-local-npm-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57fbdf3e9b64bd0336eec4eb812a9f46e802ee7dd443fbdc3369a8d80c3be236 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122260

Malicious code in sass-loader-cassini-socketio-wasat npm...

EUVD-2025-116711

Malicious code in antares-aurora-cassini-pino-pretty npm...

EUVD-2025-123747

Malicious code in phoebe-pyxis-cassini-relay npm...

EUVD-2025-122745

Malicious code in rehype-neptune-buffer-cassini npm...

EUVD-2025-123539

Malicious code in postcss-chalk-cassini-hugo npm...

EUVD-2025-120447

Malicious code in winston-cassini-mutation-orbit npm...

EUVD-2025-123241

Malicious code in protractor-docusaurus-prettier-cassini npm...

EUVD-2025-120665

Malicious code in warp-cassini-bellatrix-lint-staged npm...

Malicious code in koa-cassini-eclipse-lint-staged (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1cd24fb361200188d4b0c5bd6616f98a3460bd0844e006c879e4840212da4a9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-cassini-meissa-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b64615720f06f661a16a29fb070139c4ae20bbb8d4fc0453a92394d279176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...