Malicious Package

Overview leda-cassini-dactyl-mongodb is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in dactyl-pegasus-dione-saturnology (npm)

The package dactyl-pegasus-dione-saturnology was found to contain malicious code. --- Credit: OpenSSF source...

Malicious Package

Overview dactyl-titan-cz-conventional-changelog-mocha is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...

Malicious Package

Overview dactyl-pegasus-dione-saturnology is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and...

Malicious Package

Overview dactyl-cygnus-carpo-magellan is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

EUVD-2025-177060

Malicious code in primatology-callback-dactyl-telesto npm...

EUVD-2025-179608

Malicious code in config-dactyl-foundation-sirius npm...

Malicious code in eslint-plugin-fornax-auth-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be26c82a94b33272a9b5391a0f7fe3a8cb9d572639e42301d598f6ff497f416c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kronos-inquirer-promise-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 061924477c364a15646e4464bbe03fb996300c139bfe1c00cc40eef390aa71a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175408

Malicious code in zephyr-neptune-dactyl-aurora npm...

EUVD-2025-179420

Malicious code in dactyl-transform-nightwatch-petrology npm...

EUVD-2025-178996

Malicious code in exec-dactyl-halley-phoebe npm...

EUVD-2025-178848

Malicious code in fornax-materialize-sails-dactyl npm...

EUVD-2025-178506

Malicious code in html-webpack-plugin-promise-meteor-dactyl npm...

EUVD-2025-178538

Malicious code in hermes-dactyl-canopus-flare npm...

EUVD-2025-180092

Malicious code in betelgeuse-dactyl-rollup-plugin-quasarjet npm...

EUVD-2025-177284

Malicious code in pegasus-mui-dactyl-terser npm...

EUVD-2025-177683

Malicious code in nebula-dactyl-avior-thermosphere npm...

EUVD-2025-177443

Malicious code in ophiuchus-dactyl-elara-proxima npm...

Malicious code in hermes-dactyl-canopus-flare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62799d2b20f03765f78f7108ecd6c29ff5e28773faa479e8584065f639f569e8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...