EUVD-2025-179575

Malicious code in cordelia-indus-cors-dotenv-safe npm...

EUVD-2025-175470

Malicious code in xo-indus-procyon-indus npm...

EUVD-2025-176191

Malicious code in stream-indus-dendrochronology-run-script npm...

EUVD-2025-178420

Malicious code in indus-virgo-publish-taurus npm...

EUVD-2025-178421

Malicious code in indus-triton-polaris-nextjs npm...

EUVD-2025-179777

Malicious code in chalk-stop-indus-module npm...

EUVD-2025-177415

Malicious code in orbit-luna-indus-xanthus npm...

MAL-2025-186991 Malicious code in firebase-indus-biogeochemistry-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cd2f7d463efef4ff5f61869e121b0565321a7327a631f0dec3c6b17ce11bace4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179884

Malicious code in capella-indus-config-relay npm...

EUVD-2025-180460

Malicious code in algol-apollo-indus-extremophile npm...

EUVD-2025-179637

Malicious code in commitlint-betelgeuse-yaml-indus npm...

Malicious code in indus-triton-polaris-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce16fae40cad6ac6618e19cfa3d4f555f05adf35508e0718734b0f1a138f2efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177662

Malicious code in neptune-indus-tachyon-phoenix npm...

Malicious code in indus-neptune-typeorm-io (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5516309892382b3fb0fe6dd7dffb02a9504ac82c70a818e30c46579076ffb483 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-185998 Malicious code in capella-indus-config-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176066

Malicious code in tardigrade-indus-baryon-axios npm...

EUVD-2025-175406

Malicious code in zephyr-promise-morgan-indus npm...

Malicious code in parsec-barnard-indus-vuepress (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acf67cd6c7d272b18c189b6a696b3683ce668ba0405360dd3850a0a83726854d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178424

Malicious code in indus-farout-carpo-astrobiology npm...

EUVD-2025-180233

Malicious code in aurora-nodemon-whitedwarf-indus npm...