EUVD-2025-113351

Malicious code in gacrux-dactyl-celeste-solis npm...

EUVD-2025-116578

Malicious code in apollo-quasar-hermes-dactyl npm...

Malicious code in chalk-dactyl-orbit-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 898e80c587971502b590b876c55fb4a6a5b90d432319bf99f60743961464fecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124746

Malicious code in morgan-dione-dactyl-achernar npm...

EUVD-2025-121830

Malicious code in spawn-dotenv-dactyl-sirius npm...

EUVD-2025-122907

Malicious code in radiant-local-magellan-dactyl npm...

EUVD-2025-116252

Malicious code in babel-dactyl-axios-neptune npm...

Malicious code in dactyl-postcss-slidev-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in module-polaris-dactyl-cors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8a72463d4d1200e3476f7c45575a7a197213739bf5954a2109210a8d2d91f40 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123705

Malicious code in pino-dione-bellatrix-dactyl npm...

EUVD-2025-123032

Malicious code in pyxis-terser-dactyl-rollup-plugin npm...

EUVD-2025-112863

Malicious code in helmet-dactyl-flare-uglify-js npm...

MAL-2025-144023 Malicious code in juno-dactyl-spectron-webdriver-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10155d644f5afcc759ffb2649134e271d66ff9e4bac71be13e262a7c5da6063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141455 Malicious code in dactyl-superagent-csv-hermes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac37a2b7d4cf959487b6971f5a52dfd4de82f944d66391f5002aadcedb11b9c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121121

Malicious code in triton-bellatrix-dactyl-cressida npm...

EUVD-2025-115316

Malicious code in cli-dactyl-restart-meteor npm...

EUVD-2025-115556

Malicious code in centaurus-reveal-md-ignite-dactyl npm...

EUVD-2025-121432

Malicious code in telesto-middleware-dactyl-perseus npm...

Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...