EUVD-2025-115295

Malicious code in cli-ursa-lyra-middleware npm...

EUVD-2025-112437

Malicious code in install-europa-aquarius-cli npm...

EUVD-2025-115604

Malicious code in celeste-cli-uglify-js-update npm...

EUVD-2025-116359

Malicious code in auth0-cygnus-farout-cli npm...

EUVD-2025-115308

Malicious code in cli-gemini-kastra-unuk npm...

EUVD-2025-115307

Malicious code in cli-install-hercules-prompts npm...

EUVD-2025-115293

Malicious code in cli-version-standard-antares npm...

EUVD-2025-115602

Malicious code in celeste-cressida-sirius-cli npm...

EUVD-2025-115318

Malicious code in cli-cluster-duplex-eslint-config npm...

Malicious code in cli-sedna-xo-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea95c52ea49932e465b636027c985528b53c29b37dbe031de9640b0ba8b01cb0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124267

Malicious code in nova-cli-cosmos-phoebe npm...

EUVD-2025-115300

Malicious code in cli-quantum-graphql-phoebe npm...

EUVD-2025-123667

Malicious code in pino-uglify-js-uninstall-cli npm...

EUVD-2025-115304

Malicious code in cli-node-config-eridanus-dione npm...

Malicious code in gatsby-capella-cli-titan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e70ae7b409af968790cb31d4f80f53de02919a0ec8faeb9b589e37e0b5e2c3ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115264

Malicious code in colors-corvus-postgres-cli npm...

EUVD-2025-112099

Malicious code in jsonp-writable-grus-cli npm...

EUVD-2025-115290

Malicious code in cli-zephyr-pegasus-commitizen npm...

MAL-2025-147760 Malicious code in sedna-cli-csrf-telesto (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0e23e8cd40c2c78f1ec47be9e930934db34eeffed408bdcbbd9688392b70daf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...