EUVD-2025-123547

Malicious code in polaris-tailwindcss-gravity-geckodriver npm...

EUVD-2025-123518

Malicious code in postcss-loader-npm-child-process-gravity npm...

EUVD-2025-123467

Malicious code in prettier-await-sedna-gravity npm...

EUVD-2025-123020

Malicious code in quantum-ganymede-gravity-winston npm...

EUVD-2025-124742

Malicious code in morgan-gravity-lint-altair npm...

EUVD-2025-124695

Malicious code in mutation-gacrux-axios-gravity npm...

EUVD-2025-124339

Malicious code in nodemon-less-gravity-process npm...

EUVD-2025-123962

Malicious code in parcel-gravity-lynx-triton npm...

EUVD-2025-113092

Malicious code in gravity-centauri-helios-antares npm...

MAL-2025-145223 Malicious code in mutation-gacrux-axios-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector df2cb2e0a07e4cb03c277e22d854f9cbc3681de5b051d9d9a3b838494c646a9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113095

Malicious code in gravity-babel-lint-spectron npm...

EUVD-2025-112335

Malicious code in jabbah-gravity-spectron-webdriver-cassini npm...

EUVD-2025-112302

Malicious code in janus-gravity-npm-proxima npm...

EUVD-2025-111476

Malicious code in magellan-gravity-rehype-proxima npm...

EUVD-2025-121260

Malicious code in thuban-umbra-gravity-cassini npm...

EUVD-2025-120069

Malicious code in zenobia-bellatrix-gravity-frontend npm...

EUVD-2025-121984

Malicious code in sirius-colors-betelgeuse-gravity npm...

MAL-2025-143018 Malicious code in gravity-bellatrix-farout-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8840af6420f87daaf0dc5682a4ed0da2e4e51c0d3acc1380a1e56dd4d9ca2b76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143019 Malicious code in gravity-centauri-docusaurus-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4c6888c4ce290373de142d4cf67f685e39935cd011f692270694a1c042724e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144930 Malicious code in meteor-registry-html-webpack-plugin-gravity (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ffcb4c81fe48d0c658f380eebc91b6ea464b897f40f3f86ec2cb4a976f0646f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...