EUVD-2025-113766

Malicious code in exec-indus-quark-semantic-release npm...

EUVD-2025-112552

Malicious code in indus-child-process-apollo-karma npm...

EUVD-2025-116201

Malicious code in barnard-andromeda-indus-magellan npm...

EUVD-2025-112551

Malicious code in indus-commitlint-config-angular-cross-env-xanadu npm...

EUVD-2025-111840

Malicious code in leda-hydra-pm2-indus npm...

EUVD-2025-122979

Malicious code in quasar-cluster-deneb-indus npm...

EUVD-2025-120986

Malicious code in umbriel-indus-cache-prettier-plugin-markdown npm...

EUVD-2025-121430

Malicious code in telesto-pulsar-postcss-loader-indus npm...

EUVD-2025-115889

Malicious code in bulma-indus-mui-subscription npm...

Malicious code in mdx-chai-indus-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7078962811ac003829123acb73f64404da664a345beaa595a158d60b963e27da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115617

Malicious code in castor-oberon-ursa-indus npm...

Malicious code in csv-nashira-scorpius-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a3b7aa9fe5d60a0abd4a937eb0407d231dd677987f6edf41565d138dfb317d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112547

Malicious code in indus-hercules-configstore-wezen npm...

EUVD-2025-120303

Malicious code in xanthus-indus-umbra-blitz npm...

EUVD-2025-112834

Malicious code in hercules-convict-indus-flare npm...

MAL-2025-142867 Malicious code in geckodriver-indus-testcafe-barnard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ac6d6d3632fc7594ebf9054a1009c068360978acc3d27d397bda3fae304f1ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143564 Malicious code in indus-fork-rimraf-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa831a89833772caceac7a6c6708f1dc1efc4af5b76d2e7f5c29c49b52d87fbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143576 Malicious code in indus-sagitta-dagda-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b29288bfc5d3bd96c1ca13bec626b0fd4fa6d455e3b04b89dc707940b6056572 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143566 Malicious code in indus-hercules-configstore-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d83c7c59ae73d562061dbf27cde47d80227afd7131763b615526a60ec5c807a1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143575 Malicious code in indus-resolvers-regulus-mongoose (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 409c9280aa687fece421d6f06022969bc704c4e4883823547dbb67afa933118f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...