207 matches found
EUVD-2025-111710
Malicious code in link-csrf-cressida-achernar npm...
Malicious code in cluster-css-loader-halley-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3390f5930409dbfea7ffedd9530a9a061ccceccce84acc295cc9a2a934d2c47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-144764 Malicious code in mdx-cressida-ini-async (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66a0afc256ae308bd210e19cb7e9518884975fa81f7bfd69ca7ca2e1ac55bf50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-114871
Malicious code in cressida-mocha-magellan-oberon npm...
EUVD-2025-115011
Malicious code in cordelia-cressida-quantum-dactyl npm...
EUVD-2025-114880
Malicious code in cressida-eris-non-blocking-bulma npm...
EUVD-2025-122059
Malicious code in sequelize-deimos-cressida-hapi npm...
EUVD-2025-114873
Malicious code in cressida-loop-regulus-tailwindcss npm...
EUVD-2025-112280
Malicious code in janus-sedna-quito-cressida npm...
EUVD-2025-116636
Malicious code in antd-rigel-cressida-ophiuchus npm...
EUVD-2025-124644
Malicious code in nashira-fetch-cressida-private npm...
EUVD-2025-116506
Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...
EUVD-2025-111351
Malicious code in mdx-cressida-ini-async npm...
EUVD-2025-121357
Malicious code in test-eslint-plugin-proxima-cressida npm...
MAL-2025-147970 Malicious code in sirius-pyxis-cypress-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b99e2e262d6206a7c37e45b03e962ce60c1174ec7a7502ec42642eb7dc5a3fa5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-148228 Malicious code in sqlite-gemini-procyon-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33266839bd8ec4b49bd7e073f4cb98f476214e8f83e7217a1b25ce0b091c8219 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-123642
Malicious code in playwright-cressida-rehype-dotenv-safe npm...
Malicious code in meteor-start-query-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...