EUVD-2025-114570

Malicious code in deneb-cli-process-protractor npm...

EUVD-2025-114110

Malicious code in eleventy-kastra-cli-sedna npm...

EUVD-2025-115602

Malicious code in celeste-cressida-sirius-cli npm...

EUVD-2025-115322

Malicious code in cli-axios-kronos-ophiuchus npm...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

EUVD-2025-115320

Malicious code in cli-celeste-cors-fornax npm...

EUVD-2025-115318

Malicious code in cli-cluster-duplex-eslint-config npm...

EUVD-2025-115315

Malicious code in cli-dagda-heka-config npm...

EUVD-2025-115307

Malicious code in cli-install-hercules-prompts npm...

EUVD-2025-115301

Malicious code in cli-passport-iota-corvus npm...

EUVD-2025-115293

Malicious code in cli-version-standard-antares npm...

EUVD-2025-115291

Malicious code in cli-xerxes-less-gulp npm...

EUVD-2025-115264

Malicious code in colors-corvus-postgres-cli npm...

EUVD-2025-115923

Malicious code in build-altair-winston-cli npm...

MAL-2025-148156 Malicious code in spica-cli-heka-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1283db4e16fe1d6642d68aea1d2f64f45a839f4b78e6f65fe2da51ee9ec9f3e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140803 Malicious code in cli-magellan-farout-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b527d8b5b28588d0d184165346d2df487d983e0a39decd2a1b463d5211ca4e08 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147462 Malicious code in rocket-astro-cli-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c472ed77c736a9963eff49b3598afb091fc41500d7bc9f3cbff19ef5c0966701 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145654 Malicious code in nova-cli-cosmos-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0a6b8ac52d3123426f5132fd67a06e0827677939e3a3e3f9791efae39d16a263 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140809 Malicious code in cli-rimraf-callback-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 507b5deb9e378a4729ae079af92904564d22a267bae8b21fe5e7db7342c1e2cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140503 Malicious code in celeste-cli-uglify-js-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fed63cfb1fb82bc628b16d127c52caa67e626fb4c898671692e4b6fb1d5e614 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...