EUVD-2025-177388

Malicious code in package-pyxis-cressida-kastra npm...

EUVD-2025-180274

Malicious code in async-cressida-umbra-vuepress npm...

EUVD-2025-176015

Malicious code in telesto-vulcan-chai-cressida npm...

EUVD-2025-179513

Malicious code in cressida-jwt-loglevel-fetch npm...

EUVD-2025-179031

Malicious code in eslint-postcss-loader-pm2-cressida npm...

EUVD-2025-179096

Malicious code in epimetheus-uninstall-cressida-sedna npm...

EUVD-2025-179514

Malicious code in cressida-indus-epimetheus-borealis npm...

EUVD-2025-180337

Malicious code in arcturus-venus-loop-cressida npm...

EUVD-2025-177485

Malicious code in odin-fetch-arcturus-cressida npm...

EUVD-2025-175888

Malicious code in transport-semantic-release-cressida-middleware npm...

EUVD-2025-176203

Malicious code in stop-cressida-prompts-quasar npm...

EUVD-2025-179510

Malicious code in cressida-yakutsk-zephyr-rollup npm...

MAL-2025-186371 Malicious code in cressida-vortex-lint-staged-blueshift (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d541b72f12f4ff134a895458ff7ace3372090c5a8033ba0c1df81b2f95297a48 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121121

Malicious code in triton-bellatrix-dactyl-cressida npm...

EUVD-2025-111760

Malicious code in levels-eclipse-await-cressida npm...

EUVD-2025-121357

Malicious code in test-eslint-plugin-proxima-cressida npm...

Malicious code in capella-changelog-cressida-jabbah (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e9e9e3261268abc9d9f358e046c33a68cbf459c83bb26bf4bde323534143ee0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124284

Malicious code in norma-cressida-wezen-venus npm...

EUVD-2025-121673

Malicious code in standard-cressida-callback-hexo npm...

Malicious code in cluster-css-loader-halley-cressida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...