EUVD-2025-121430

Malicious code in telesto-pulsar-postcss-loader-indus npm...

EUVD-2025-122971

Malicious code in quasar-indus-spinner-pulsar npm...

EUVD-2025-114612

Malicious code in deimos-indus-ursa-cordelia npm...

EUVD-2025-115617

Malicious code in castor-oberon-ursa-indus npm...

EUVD-2025-123432

Malicious code in prettier-plugin-markdown-nebula-indus-dependencies npm...

EUVD-2025-123417

Malicious code in prettier-stop-query-indus npm...

EUVD-2025-116847

Malicious code in airbnb-geckodriver-indus-barnard npm...

EUVD-2025-122987

Malicious code in quark-quark-nashira-indus npm...

EUVD-2025-112540

Malicious code in indus-perseus-publish-rate-limiter npm...

EUVD-2025-114562

Malicious code in deneb-magellan-triton-indus npm...

EUVD-2025-112554

Malicious code in indus-bootes-release-it-mui npm...

Malicious code in wezen-mira-morgan-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aced490826c2d7edbe824a07a4bbed1a8ee680171c14127269d06d326744906a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112551

Malicious code in indus-commitlint-config-angular-cross-env-xanadu npm...

Malicious code in sequelize-indus-weywot-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0276c5198a70a0a304293120e13ff16584af2f2ecfb9024ac2e14cc3b044a54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111840

Malicious code in leda-hydra-pm2-indus npm...

EUVD-2025-120525

Malicious code in webpack-prettier-stylelint-indus-version npm...

EUVD-2025-122010

Malicious code in shelljs-farout-indus-version npm...

EUVD-2025-116513

Malicious code in ariel-indus-telesto-fomalhaut npm...

Malicious code in csv-nashira-scorpius-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a3b7aa9fe5d60a0abd4a937eb0407d231dd677987f6edf41565d138dfb317d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148498 Malicious code in telesto-pulsar-postcss-loader-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 29a275cd2a794542f709a54139244958b2081f35f7c8c56c88d694ce794d791e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...