EUVD-2025-115602

Malicious code in celeste-cressida-sirius-cli npm...

EUVD-2025-115296

Malicious code in cli-supervisor-meissa-transform npm...

EUVD-2025-120800

Malicious code in version-achernar-nightwatch-cli npm...

EUVD-2025-112190

Malicious code in jest-flare-less-cli npm...

Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112470

Malicious code in inquirer-cli-spinner-antd npm...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115322

Malicious code in cli-axios-kronos-ophiuchus npm...

EUVD-2025-111915

Malicious code in koa-odin-aquarius-cli npm...

EUVD-2025-113289

Malicious code in ganymede-sqlite-proxima-cli npm...

EUVD-2025-115293

Malicious code in cli-version-standard-antares npm...

Malicious code in gravity-pm2-cosmiconfig-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 76d5d825950e78fede990188d0828c15b780d15be9a2cbfdb65192a4e13a6186 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115291

Malicious code in cli-xerxes-less-gulp npm...

EUVD-2025-113276

Malicious code in gatsby-capella-cli-titan npm...

EUVD-2025-122129

Malicious code in sedna-socketio-cli-scorpius npm...

EUVD-2025-115300

Malicious code in cli-quantum-graphql-phoebe npm...

EUVD-2025-112614

Malicious code in hyperion-scorpius-xerxes-cli npm...

EUVD-2025-115299

Malicious code in cli-rimraf-callback-exec npm...

MAL-2025-140503 Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...