EUVD-2025-114725

Malicious code in cygnus-subscription-sqlite-radiant npm...

Malicious code in cygnus-publish-apollo-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84c03f11a829c2bc6b90dbf8fccd6788100da66f690ac6c5aae274f08fbe6bd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115062

Malicious code in configstore-cygnus-envconfig-mongoose npm...

EUVD-2025-112179

Malicious code in jest-slidev-express-cygnus npm...

EUVD-2025-114743

Malicious code in cygnus-eslint-changelog-sedna npm...

EUVD-2025-116931

Malicious code in acamar-cygnus-hyperion-mongodb npm...

Malicious code in selenium-changelog-cygnus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737e61e6b3c79918629a831b886044c747112191f4f98adc035a01d44f116970 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114739

Malicious code in cygnus-ini-duplex-eris npm...

Malicious code in puppeteer-cygnus-adonis-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8997e406d79c2a741f6ad8928ed83da560a744123ccd97a4c6fd754b05d6caa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114737

Malicious code in cygnus-karma-prettier-plugin-markdown-winston npm...

EUVD-2025-114728

Malicious code in cygnus-stream-lyra-apex npm...

EUVD-2025-115235

Malicious code in comet-cygnus-antd-koa npm...

EUVD-2025-114882

Malicious code in cressida-cygnus-chariklo-magellan npm...

EUVD-2025-114723

Malicious code in cygnus-testcafe-triton-proxima npm...

EUVD-2025-124009

Malicious code in orbit-reveal-md-charon-cygnus npm...

EUVD-2025-120561

Malicious code in webdriverio-eslint-cygnus-elara npm...

Malicious code in cygnus-html-webpack-plugin-convict-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77a7c905e6d297a266e003ada74f2dd7959d66a6bba0eb74d4c082c443e0fdd5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in auth0-cygnus-farout-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f358ba8f4b4d9e99efca5ba9615c7aca5971cc9cc415499a66f3b5529194551 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114733

Malicious code in cygnus-pm2-husky-loglevel npm...

Malicious code in cygnus-pino-pretty-pm2-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bb5eb2f0b3372ea6bc8e5aba8a9ad3a334a244fd1f0d9dc4913ee53f3e7fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...