Malicious code in release-it-nova-orbit-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 860ab3495ac1d9fef2ffac460dccd2454e48b85c3df2a2fa18a230ee9b876907 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179164

Malicious code in eleventy-delphinus-figures-async npm...

EUVD-2025-175981

Malicious code in testcafe-chalk-magellan-figures npm...

EUVD-2025-178283

Malicious code in javascript-magnetar-epimetheus-figures npm...

EUVD-2025-178920

Malicious code in figures-betelgeuse-ethology-magellan npm...

EUVD-2025-178555

Malicious code in helmet-release-it-enceladus-figures npm...

EUVD-2025-178919

Malicious code in figures-duplex-halley-vuetify npm...

EUVD-2025-179365

Malicious code in deimos-koa-build-figures npm...

EUVD-2025-178799

Malicious code in gacrux-figures-postcss-fornax npm...

Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178917

Malicious code in figures-elara-lithosphere-cosmicsilence npm...

EUVD-2025-178440

Malicious code in impulse-dependencies-spinner-figures npm...

EUVD-2025-177024

Malicious code in procyon-yaml-figures-toml npm...

EUVD-2025-178921

Malicious code in figures-archaeoastronomy-hadron-enif npm...

EUVD-2025-178913

Malicious code in figures-miranda-helmet-exec npm...

EUVD-2025-178918

Malicious code in figures-duplex-magnetar-await npm...

EUVD-2025-179079

Malicious code in eridanus-antimatter-figures-dotenv-safe npm...

MAL-2025-186718 Malicious code in eleventy-delphinus-figures-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0224ac3cb23c603d157129375e0a9a49860917e8b20c5c455d7932530d367bc9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178438

Malicious code in impulse-figures-inquirer-oortcloud npm...

MAL-2025-189894 Malicious code in testcafe-chalk-magellan-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0defc1c288c0f0de3ca469123bec775b3116760a84b9dde2403275871040b7d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...