EUVD-2025-179717

Malicious code in cli-hermes-mesosphere-corvus npm...

EUVD-2025-179558

Malicious code in corvus-javascript-charon-semantic-ui npm...

EUVD-2025-180426

Malicious code in antares-aurora-mocha-corvus npm...

EUVD-2025-180045

Malicious code in biotechnology-corvus-phoebe-inquirer npm...

EUVD-2025-176767

Malicious code in redis-corvus-transform-dependencies npm...

EUVD-2025-177589

Malicious code in nightwatch-restart-corvus-arcturus npm...

EUVD-2025-179239

Malicious code in draco-terser-webpack-plugin-hermes-corvus npm...

Malicious code in umbriel-transform-corvus-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba0535ab8475a2cfe19c1ada68feab5732883367dc7554d2a673d0616d955ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176574

Malicious code in sadr-corvus-janus-eclipse npm...

EUVD-2025-176193

Malicious code in stream-build-ganymede-corvus npm...

EUVD-2025-175824

Malicious code in umbriel-transform-corvus-request npm...

EUVD-2025-179557

Malicious code in corvus-phylogenetics-metabolomics-puppeteer npm...

Malicious code in corvus-javascript-charon-semantic-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b3ec6da952c946bcdb511cd68067f74a208ceba883ec29ce8802e9ca8e1554b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178183

Malicious code in koa-eslint-plugin-corvus-dotenv-parse-variables npm...

MAL-2025-186323 Malicious code in corvus-darkmatter-titan-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ee347a8414e37c2db0dd852e5fcce8e90db1d785146cb6c111173d9d2a5b048 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186326 Malicious code in corvus-vuepress-concurrently-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186165 Malicious code in cli-hermes-mesosphere-corvus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046bc8f401b8fde8793714a2be47b15ddd79ce0545360eba45d7634fd4958c45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176483

Malicious code in scripts-thermochronology-corvus-stop npm...

Malicious code in nightwatch-restart-corvus-arcturus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 877c94f83337eb1f8226da3f2d8366612b91dd7661e18dd8f821748bc5a2bee5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179556

Malicious code in corvus-vuepress-concurrently-elara npm...