EUVD-2025-179513

Malicious code in cressida-jwt-loglevel-fetch npm...

EUVD-2025-179515

Malicious code in cressida-cybernetics-rollup-plugin-node-sass npm...

EUVD-2025-179120

Malicious code in entanglement-tachyon-puppeteer-cressida npm...

EUVD-2025-175888

Malicious code in transport-semantic-release-cressida-middleware npm...

EUVD-2025-177388

Malicious code in package-pyxis-cressida-kastra npm...

EUVD-2025-176015

Malicious code in telesto-vulcan-chai-cressida npm...

EUVD-2025-180462

Malicious code in algol-aldebaran-cressida-nodejs npm...

MAL-2025-186371 Malicious code in cressida-vortex-lint-staged-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d541b72f12f4ff134a895458ff7ace3372090c5a8033ba0c1df81b2f95297a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179510

Malicious code in cressida-yakutsk-zephyr-rollup npm...

EUVD-2025-179297

Malicious code in dione-cressida-schema-spectron npm...

Malicious code in cressida-cache-iota-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector efdc68100f25ab316f603e943cc9672495c31169a3534af578cd94b80cb0b020 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180337

Malicious code in arcturus-venus-loop-cressida npm...

EUVD-2025-179511

Malicious code in cressida-vortex-lint-staged-blueshift npm...

EUVD-2025-179096

Malicious code in epimetheus-uninstall-cressida-sedna npm...

EUVD-2025-177485

Malicious code in odin-fetch-arcturus-cressida npm...

Malicious code in cressida-jwt-loglevel-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9c579391a28b717cc3bab01d83cefe0a9573ccb0c4b8dee4c27e98fcb9b1adac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180389

Malicious code in apollo-development-cressida-umbriel npm...

EUVD-2025-179031

Malicious code in eslint-postcss-loader-pm2-cressida npm...

EUVD-2025-176203

Malicious code in stop-cressida-prompts-quasar npm...

EUVD-2025-175745

Malicious code in vega-commitlint-prosthetics-cressida npm...