Malicious code in archaeometry-cordelia-capella-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9a2c8d6a31e349fd295ea6069c1f1bc56f8eba23734d8405f248f309f202a2e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cordelia-zenith-ganymede-mutation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c52cc7a0b5ee7ab3c856d1daa1a376b8b8524151fc4f7a6b66551f0059afb40c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179576

Malicious code in cordelia-dione-hyperion-superposition npm...

EUVD-2025-176029

Malicious code in tectonophysics-farout-cordelia-darkenergy npm...

EUVD-2025-179578

Malicious code in cordelia-babel-on-proxima npm...

EUVD-2025-178738

Malicious code in gemini-sagitta-cordelia-aether npm...

EUVD-2025-178005

Malicious code in luna-cordelia-blackhole-lithosphere npm...

EUVD-2025-176274

Malicious code in spawn-venus-hydra-cordelia npm...

EUVD-2025-178362

Malicious code in io-cordelia-meteor-filament npm...

EUVD-2025-176298

Malicious code in socketio-cordelia-nightwatch-petrology npm...

EUVD-2025-179572

Malicious code in cordelia-zenith-ganymede-mutation npm...

Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179575

Malicious code in cordelia-indus-cors-dotenv-safe npm...

MAL-2025-187877 Malicious code in luna-cordelia-blackhole-lithosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f4671bed4986784ce341d0ba6709ba439dfb5c96942dd8001c1ab0c963fb1d1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179574

Malicious code in cordelia-solis-markdown-xerxes npm...

EUVD-2025-179719

Malicious code in cli-cordelia-chalk-redgiant npm...

EUVD-2025-179359

Malicious code in delphinus-chromedriver-quasar-cordelia npm...

EUVD-2025-180354

Malicious code in archaeometry-cordelia-capella-dotenv npm...

EUVD-2025-176012

Malicious code in terraforming-nebula-cordelia-virtualreality npm...

MAL-2025-186309 Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...