EUVD-2025-177782

Malicious code in module-fornax-elara-mongodb npm...

EUVD-2025-179794

Malicious code in chakra-ui-fornax-umbriel-wezen npm...

EUVD-2025-178844

Malicious code in fornax-transport-webdriver-manager-carpo npm...

EUVD-2025-177981

Malicious code in magellan-fornax-chai-test npm...

EUVD-2025-178850

Malicious code in fornax-library-eslint-javascript npm...

Malicious code in epigenetics-cosmology-radiometric-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 20bf5c56a9c6317de0c54037cc6cfdd980b74bf235b9dc3993359cb8469c2011 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-socketio-ganymede-boson (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbf81223eb44037f720c7f81236de5d3bf785a23ec6a4b48c754958e420b7afc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177505

Malicious code in nuxtjs-test-fornax-postgres npm...

Malicious code in fornax-local-gemini-zenith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f8f9b559ad10d6f12bca30ea4b8ecde5143e517b27f5b4d695552fd03ad93c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178851

Malicious code in fornax-jest-ariel-spica npm...

EUVD-2025-176825

Malicious code in quito-fornax-dynamo-csrf npm...

EUVD-2025-179751

Malicious code in charon-stream-fornax-dotenv npm...

EUVD-2025-177442

Malicious code in ophiuchus-eleventy-fornax-proxima npm...

Malicious code in phenomic-metalsmith-neptune-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 40a3e947e7e13e33325e88989cd6115c193af7ef059f6904daade611693e4fa9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175973

Malicious code in testcafe-titan-fornax-astro npm...

EUVD-2025-179995

Malicious code in bootstrap-cluster-fornax-link npm...

EUVD-2025-180380

Malicious code in apollo-slides-duplex-fornax npm...

EUVD-2025-178855

Malicious code in fornax-acamar-photon-futurology npm...

MAL-2025-186932 Malicious code in extremophile-fornax-quasar-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d88a6750f997b6922c6e43621f0149719c6dd1780dcde55c9fa55d9aeb2e800 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186255 Malicious code in commitlint-publish-fornax-prettier-stylelint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58d0a6efe42d239d3fb4ecfc887966e3ba7f79c8cde0ddd056df53c7460a5ae4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...