EUVD-2025-179637

Malicious code in commitlint-betelgeuse-yaml-indus npm...

EUVD-2025-176191

Malicious code in stream-indus-dendrochronology-run-script npm...

EUVD-2025-178424

Malicious code in indus-farout-carpo-astrobiology npm...

EUVD-2025-178576

Malicious code in heka-mdx-kaus-indus npm...

EUVD-2025-178420

Malicious code in indus-virgo-publish-taurus npm...

EUVD-2025-178421

Malicious code in indus-triton-polaris-nextjs npm...

EUVD-2025-180233

Malicious code in aurora-nodemon-whitedwarf-indus npm...

EUVD-2025-177315

Malicious code in parsec-barnard-indus-vuepress npm...

EUVD-2025-179514

Malicious code in cressida-indus-epimetheus-borealis npm...

Malicious code in indus-triton-polaris-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce16fae40cad6ac6618e19cfa3d4f555f05adf35508e0718734b0f1a138f2efe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in procyon-aurora-zenith-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ee9d82155772729a89d4891311cc4f51a4cca870e1ed4af8058e7900dfc6f7c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177662

Malicious code in neptune-indus-tachyon-phoenix npm...

EUVD-2025-176066

Malicious code in tardigrade-indus-baryon-axios npm...

EUVD-2025-175470

Malicious code in xo-indus-procyon-indus npm...

EUVD-2025-177576

Malicious code in node-config-hexo-version-indus npm...

EUVD-2025-175406

Malicious code in zephyr-promise-morgan-indus npm...

Malicious code in chalk-stop-indus-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87bb8e1129a1d5a199fd42030542e91c8c409a534084d9519532cc4057e92cc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in capella-indus-config-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68bfa28ddf0fe8d14595cfe49367f754f2bc29b2a834ca5172654283e2f49c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176712

Malicious code in release-it-indus-promise-xml npm...

EUVD-2025-178422

Malicious code in indus-reveal-md-gulp-neptune npm...