EUVD-2025-176485

Malicious code in scripts-private-frontend-fornax npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-178847

Malicious code in fornax-phoebe-jabbah-xo npm...

EUVD-2025-178849

Malicious code in fornax-local-gemini-zenith npm...

EUVD-2025-178850

Malicious code in fornax-library-eslint-javascript npm...

EUVD-2025-175404

Malicious code in zephyr-yakutsk-update-fornax npm...

MAL-2025-186843 Malicious code in eslint-plugin-fornax-auth-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be26c82a94b33272a9b5391a0f7fe3a8cb9d572639e42301d598f6ff497f416c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188377 Malicious code in nuxtjs-test-fornax-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06d5b29631fb2bda9c539656ce905f027cf1e1e09824995f998eb35c2ef8fde2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178799

Malicious code in gacrux-figures-postcss-fornax npm...

Malicious code in dorado-jest-gatsby-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3af9de4e8e9dafb88bdd63a361c5362004e17237ed4fcee7acb6bc660c15eecb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eslint-plugin-fornax-auth-dactyl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be26c82a94b33272a9b5391a0f7fe3a8cb9d572639e42301d598f6ff497f416c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185543 Malicious code in arcturus-fornax-thuban-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7009c927b5e00df689b7d6fb41e960faddd6fa557d4deb76f787a5556c51e1d3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177226

Malicious code in phenomic-metalsmith-neptune-fornax npm...

MAL-2025-186469 Malicious code in dagda-ganymede-fornax-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c482e6ef43cf12ba929a25f688df88502f4b2657364bb234a83ecb03729ec0ff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178230

Malicious code in jwt-ursa-apollo-fornax npm...

EUVD-2025-178760

Malicious code in gatsby-fornax-nuxtjs-vuetify npm...

EUVD-2025-176521

Malicious code in sass-loader-fornax-passport-geoarchaeology npm...

EUVD-2025-175569

Malicious code in weywot-webdriver-mocha-loglevel-fornax npm...

EUVD-2025-177393

Malicious code in outercore-sync-fornax-lightyear npm...

EUVD-2025-176556

Malicious code in sagitta-publish-wasat-fornax npm...