EUVD-2025-116699

Malicious code in antares-cypress-cygnus-draco npm...

Malicious code in antares-cypress-cygnus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ab3cd2a208a97ccbfb1636b9e675b1bdb1ea44289c7dac7f3c416ef7754ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

MAL-2025-141365 Malicious code in cygnus-draco-local-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8794f6d1882edfc2e26a48be8a5192def801a638744e65a731076bd27bcb8882 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...