EUVD-2025-116082

Malicious code in blaze-equinox-ceres-nightmare npm...

EUVD-2025-115539

Malicious code in ceres-hydra-rocket-stop npm...

EUVD-2025-115527

Malicious code in ceres-vega-update-jovian npm...

EUVD-2025-115535

Malicious code in ceres-mensa-convict-process npm...

EUVD-2025-115401

Malicious code in chariklo-pegasus-ceres-procyon npm...

MAL-2025-139898 Malicious code in backend-wasat-ceres-fusion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78977fc84c2e7c36ed3f9a84b4d2226faeeb53aeda92309a9ebf36bcdb7a06ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140574 Malicious code in ceres-react-bootstrap-gatsby-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf3b4e726dde90fa56bb930d14a2e37b38d2948bf534b5ec6b166ca2e2d78a12 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141962 Malicious code in element-ui-ceres-aquarius-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e54814dfe23a781cb3e4bd646a7076f4328a131fa2f85effb56c7c81ba91163 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143093 Malicious code in grus-jwt-transform-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3dab769d42a98e5e3a53c842163f9c5d812b5bdb3e8f41c58b8ffaaa433b7e9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143509 Malicious code in ignite-ceres-element-ui-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 979a077177e77d8dd179974db351f01ac49b8fccde97b9a54405b9175dd8ac2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144055 Malicious code in jupiter-frontend-io-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34176c946bef9512eef39a6bf7c7ddc4aeecbe799512a162fa76578058365c4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140562 Malicious code in ceres-dione-materialize-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4299ee1b5a3b953487ab291e6ea99362c4b420b372a5776540747c429c4155eb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144011 Malicious code in jsonp-vuepress-uninstall-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e22c1b7d849adddb2164e3659fb2e5c1d9952215c0d2bb3750fe6a52862dfb9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143274 Malicious code in hercules-ceres-jest-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 968504ba2b4fd0f91b0925a1a6f37f0f562d4535dd22ce439ac50ad7e2326765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145487 Malicious code in nightwatch-sqlite-frontend-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b00438414a1d05247d07d79b8384dbb973407ca000f4e44d02b9467d274865a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140576 Malicious code in ceres-scripts-koa-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ed4e8bf1de4a6e5485b179ffede3ed09c77c20f0f6da0128140f27abc9d497c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146955 Malicious code in quasar-markdownlint-ceres-atlas (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8113bb10e900e121e246fa006760ee6755edcbf80e44b1dd7707d972c4312330 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140579 Malicious code in ceres-telesto-bootstrap-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1963d409fb2d23eef932cebebd3c943bfc90713c7057abbfab42485f32f74887 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147164 Malicious code in rehype-cordelia-framework-ceres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bb6b689160e4581ea532cb8229eedfe2bc5bdfad888df29d6e500d0aaa36077a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148154 Malicious code in spica-ceres-semantic-release-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94907f605263e00cb2d997529dfc2248d32cb9f5aa066cd46b1869ed5c1b64f4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...