EUVD-2025-175800

Malicious code in update-dorado-farout-draco npm...

EUVD-2025-179239

Malicious code in draco-terser-webpack-plugin-hermes-corvus npm...

EUVD-2025-180036

Malicious code in blazar-draco-mesosphere-mineralogy npm...

Malicious code in buffer-css-loader-draco-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5ae31d8f1fe77a4535d4c2304e138491272c5692a24d0d9e2b9c8877d430f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in draco-hermes-betelgeuse-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6e3e9fa277eb2731d2e5d6b112e3c7dc4fcd0328ded4825757ce1929bf1fad88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmicray-draco-interferometry-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74e5c6911b77d8405e431ac6d9229df453c50c824c01099cc54520e00d557257 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ursa-eslint-config-draco-kronos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e217945f165a1f3c90399d422a9537e095a863757767e01869c147571bd5687e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177380

Malicious code in paleobotany-perseus-draco-mensa npm...

EUVD-2025-177950

Malicious code in markdown-pdf-draco-kuiperbelt-tethys npm...

MAL-2025-186639 Malicious code in draco-gacrux-carpo-await (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e99af30e309e14cdab037f48e58b659c2e89b47c57ea0ca10d2d97b6c7f47586 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178699

Malicious code in global-outercore-superagent-draco npm...

MAL-2025-187162 Malicious code in geodynamo-draco-cache-thermochronology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector faf8bc17f4419109058b137dbb7f9cfea702b6352c942c830cee9294fde9f0f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123199

Malicious code in proxima-mdx-hugo-draco npm...

Malicious code in proxima-mdx-hugo-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f61776310ad21e449a4587721604572505e76234f8384ee96d1dcd2ce81c2a86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121755

Malicious code in spica-nextjs-draco-despina npm...

EUVD-2025-124525

Malicious code in nestjs-fork-draco-fornax npm...

EUVD-2025-114165

Malicious code in elektra-draco-kinetic-backend npm...

EUVD-2025-113928

Malicious code in eris-pyxis-draco-bulma npm...

EUVD-2025-115472

Malicious code in chalk-draco-wezen-canopus npm...

EUVD-2025-113700

Malicious code in farout-draco-supervisor-chai npm...