EUVD-2025-177782

Malicious code in module-fornax-elara-mongodb npm...

EUVD-2025-179794

Malicious code in chakra-ui-fornax-umbriel-wezen npm...

EUVD-2025-178844

Malicious code in fornax-transport-webdriver-manager-carpo npm...

EUVD-2025-177981

Malicious code in magellan-fornax-chai-test npm...

EUVD-2025-178850

Malicious code in fornax-library-eslint-javascript npm...

Malicious code in epigenetics-cosmology-radiometric-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bf5c56a9c6317de0c54037cc6cfdd980b74bf235b9dc3993359cb8469c2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-socketio-ganymede-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81223eb44037f720c7f81236de5d3bf785a23ec6a4b48c754958e420b7afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177505

Malicious code in nuxtjs-test-fornax-postgres npm...

Malicious code in fornax-local-gemini-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f8f9b559ad10d6f12bca30ea4b8ecde5143e517b27f5b4d695552fd03ad93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178851

Malicious code in fornax-jest-ariel-spica npm...

EUVD-2025-176825

Malicious code in quito-fornax-dynamo-csrf npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-177442

Malicious code in ophiuchus-eleventy-fornax-proxima npm...

Malicious code in phenomic-metalsmith-neptune-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a3e947e7e13e33325e88989cd6115c193af7ef059f6904daade611693e4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175973

Malicious code in testcafe-titan-fornax-astro npm...

EUVD-2025-179995

Malicious code in bootstrap-cluster-fornax-link npm...

EUVD-2025-180380

Malicious code in apollo-slides-duplex-fornax npm...

EUVD-2025-178855

Malicious code in fornax-acamar-photon-futurology npm...

MAL-2025-186608 Malicious code in dorado-jest-gatsby-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9de4e8e9dafb88bdd63a361c5362004e17237ed4fcee7acb6bc660c15eecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188576 Malicious code in passport-fornax-phenomic-helmet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0027eccb2059e4e9d4978c1294182a8c666dbf5f0394eb96327a6a25b3a20c88 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...