EUVD-2025-176496

Malicious code in scorpius-elara-membrane-brane npm...

EUVD-2025-179606

Malicious code in config-elara-leda-nucleosynthesis npm...

EUVD-2025-179185

Malicious code in elara-triton-quasar-async npm...

EUVD-2025-178716

Malicious code in geodynamo-ursa-coronalmassejection-elara npm...

Malicious code in module-fornax-elara-mongodb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9f5fd83f12dfdf42a042b92d48a11b6d2b5328ccfae5ed402dbfb93ba125db69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180509

Malicious code in achernar-elara-flare-lyra npm...

EUVD-2025-179188

Malicious code in elara-hexo-postgres-astrochemistry npm...

MAL-2025-186326 Malicious code in corvus-vuepress-concurrently-elara (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e1561f44e67d0868f2fc1f6fbfb73bab11cce44a263ac47614b49c690b618d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176297

Malicious code in socketio-elara-europa-dotenv npm...

EUVD-2025-180432

Malicious code in andromeda-impulse-quasarjet-elara npm...

EUVD-2025-176031

Malicious code in tectonic-pino-pretty-build-elara npm...

EUVD-2025-177930

Malicious code in mdx-development-elara-stratosphere npm...

EUVD-2025-178917

Malicious code in figures-elara-lithosphere-cosmicsilence npm...

EUVD-2025-179187

Malicious code in elara-jovian-dorado-biogeochemistry npm...

EUVD-2025-176249

Malicious code in spinner-cryptography-acamar-elara npm...

EUVD-2025-175655

Malicious code in warp-elara-leda-bulma npm...

Malicious code in elara-triton-quasar-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc2ebd6f38ab2bc5abd8dd2a5c620057c834fe86a99da5764849ed9c0b4d1e6b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mdx-development-elara-stratosphere (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcc4bd235720b3f28d193fb963d4a38119a58061d2fb460cd83c464444e31b27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189578 Malicious code in socketio-elara-europa-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225bb3e548d67feeafaf0b3128b6664fe27c2d00f7626f199697d9775e813e54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179908

Malicious code in callback-elara-hadron-jekyll npm...