EUVD-2025-116427

Malicious code in auriga-dotenv-draco-rollup-plugin npm...

EUVD-2025-114309

Malicious code in draco-webdriver-mocha-writable-jsonp npm...

EUVD-2025-113327

Malicious code in galaxy-apollo-phoebe-draco npm...

EUVD-2025-115407

Malicious code in chariklo-inquirer-draco-juno npm...

EUVD-2025-124041

Malicious code in ora-draco-phoebe-odin npm...

EUVD-2025-114923

Malicious code in cosmiconfig-meteor-draco-antares npm...

Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112241

Malicious code in jasmine-vega-mensa-draco npm...

EUVD-2025-120050

Malicious code in zephyr-charon-draco-antd npm...

EUVD-2025-116699

Malicious code in antares-cypress-cygnus-draco npm...

EUVD-2025-112307

Malicious code in janus-elara-draco-chariklo npm...

EUVD-2025-120782

Malicious code in version-uglify-js-draco-dotenv npm...

EUVD-2025-113780

Malicious code in event-transform-electron-builder-draco npm...

EUVD-2025-114311

Malicious code in draco-wasat-miranda-node-sass npm...

EUVD-2025-114320

Malicious code in draco-auth-resolvers-html-webpack-plugin npm...

EUVD-2025-120644

Malicious code in wasat-draco-izar-vuepress npm...

MAL-2025-141787 Malicious code in draco-altair-repository-kinetic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39da5b7d66f058158f9338114fef59667d4d5f153c6d1ee354332defe2171e34 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141796 Malicious code in draco-spectron-webdriver-nashira-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0da7c3d576d83e54ed8f3ec17a17754a6a137239e745e659438cd861b60b1e66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114318

Malicious code in draco-cosmos-restart-thuban npm...

EUVD-2025-122181

Malicious code in scripts-oberon-draco-pavo npm...