EUVD-2025-177415

Malicious code in orbit-luna-indus-xanthus npm...

EUVD-2025-178426

Malicious code in indus-coronalmassejection-sass-loader-virgo npm...

EUVD-2025-179575

Malicious code in cordelia-indus-cors-dotenv-safe npm...

EUVD-2025-179514

Malicious code in cressida-indus-epimetheus-borealis npm...

MAL-2025-186105 Malicious code in chalk-stop-indus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb8e1129a1d5a199fd42030542e91c8c409a534084d9519532cc4057e92cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in indus-triton-polaris-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce16fae40cad6ac6618e19cfa3d4f555f05adf35508e0718734b0f1a138f2efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180460

Malicious code in algol-apollo-indus-extremophile npm...

EUVD-2025-180026

Malicious code in blitz-eslint-plugin-csrf-indus npm...

EUVD-2025-175406

Malicious code in zephyr-promise-morgan-indus npm...

EUVD-2025-178420

Malicious code in indus-virgo-publish-taurus npm...

EUVD-2025-178421

Malicious code in indus-triton-polaris-nextjs npm...

EUVD-2025-178425

Malicious code in indus-cybernetics-prettier-plugin-markdown-pavo npm...

Malicious code in indus-neptune-typeorm-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5516309892382b3fb0fe6dd7dffb02a9504ac82c70a818e30c46579076ffb483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177662

Malicious code in neptune-indus-tachyon-phoenix npm...

EUVD-2025-177576

Malicious code in node-config-hexo-version-indus npm...

Malicious code in indus-virgo-publish-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee5e343e832dcd592b7407aaea23128dadf679e0c78cc297bbd29ff497ab04dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178576

Malicious code in heka-mdx-kaus-indus npm...

Malicious code in orbit-luna-indus-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ed9d865a656c770e023fe92f67cb64974da1cbe3fb0141834bfffd8c86df97b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176066

Malicious code in tardigrade-indus-baryon-axios npm...