EUVD-2025-112690

Malicious code in husky-meteor-gemini-sirius npm...

EUVD-2025-111564

Malicious code in loopback-gemini-bellatrix-ora npm...

EUVD-2025-121033

Malicious code in ultra-gemini-miranda-antares npm...

EUVD-2025-114411

Malicious code in dorado-uglify-js-gemini-chalk npm...

Malicious code in dotenv-safe-nconf-gemini-vortex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8cdbfcb6b83ef7147b4041123d4274295e736f9b5059e57e55db63cc993bb9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112492

Malicious code in init-gemini-cassini-warp npm...

EUVD-2025-115308

Malicious code in cli-gemini-kastra-unuk npm...

EUVD-2025-120491

Malicious code in weywot-gemini-dynamo-regulus npm...

EUVD-2025-112465

Malicious code in inquirer-gemini-ultra-version npm...

Malicious code in gemini-lyra-stop-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6de05007ded0357f96c6580f461bd2d5f802efa82ccee17f4206e5a4433c0b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113206

Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies npm...

EUVD-2025-113207

Malicious code in gemini-mocha-impulse-grus npm...

EUVD-2025-122160

Malicious code in sedna-despina-pyxis-gemini npm...

EUVD-2025-115063

Malicious code in configstore-callback-redis-gemini npm...

EUVD-2025-122009

Malicious code in shelljs-heka-sass-loader-gemini npm...

EUVD-2025-113193

Malicious code in gemini-websockets-pino-pretty-gridsome npm...

EUVD-2025-121828

Malicious code in spawn-gemini-mongoose-transform npm...

EUVD-2025-124433

Malicious code in nightwatch-subscription-gemini-regulus npm...

EUVD-2025-123732

Malicious code in phoebe-xerxes-gemini-buffer npm...

Malicious code in sirius-development-gemini-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e955a5191c86c0569fc6fc59e5066668be1770cfc264f30ce9c384c7aa39560f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...