EUVD-2025-175627

Malicious code in wavefunction-parallax-jovian-jasmine npm...

EUVD-2025-178269

Malicious code in jovian-postgres-webdriver-mocha-await npm...

EUVD-2025-179047

Malicious code in eslint-config-jovian-middleware-init npm...

EUVD-2025-178273

Malicious code in jovian-asteroid-tectonophysics-bootstrap npm...

EUVD-2025-178997

Malicious code in exec-antimatter-jovian-postgres npm...

EUVD-2025-178271

Malicious code in jovian-less-loader-draco-wasat npm...

EUVD-2025-178299

Malicious code in janus-robotics-optimize-css-assets-webpack-plugin-jovian npm...

EUVD-2025-179127

Malicious code in enif-zooarchaeology-jovian-extremophile npm...

EUVD-2025-177363

Malicious code in paleoecology-cygnus-jovian-telesto npm...

EUVD-2025-179261

Malicious code in dotenv-safe-jovian-astroinformatics-ablation npm...

Malicious code in jovian-nodemon-winston-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb4ce02b99156b543aa9881f2f45c3688c27669e2a3d782b1528ca46d04e33f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in writable-jovian-pino-markdownlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 19f4b238352d52b2cea590b0446ad3e308f8dced4b1490cf8e439993646c0a9f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178150

Malicious code in leda-gemini-saturnology-jovian npm...

EUVD-2025-178191

Malicious code in kinetic-jovian-auth-cache npm...

EUVD-2025-178270

Malicious code in jovian-nodemon-winston-andromeda npm...

EUVD-2025-176936

Malicious code in public-jovian-solarnebula-lacerta npm...

EUVD-2025-179187

Malicious code in elara-jovian-dorado-biogeochemistry npm...

Malicious code in jovian-sass-loader-native-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 225deea9531693f6cbd7d6edd3656452b2959b26fd0b8a748ec2e08d0dbcbb98 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-auth0-joviology-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc97a55208b7ece6a83f42b44139024e81c21bdc1b43050810b785e84bf514f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178079

Malicious code in lint-auth0-joviology-jovian npm...