EUVD-2025-121516

Malicious code in sync-acamar-got-juno npm...

EUVD-2025-112075

Malicious code in juno-sirius-react-bootstrap-weywot npm...

EUVD-2025-112759

Malicious code in hexo-sirius-karma-juno npm...

EUVD-2025-112087

Malicious code in juno-eslint-plugin-webdriver-mocha-start npm...

Malicious code in loopback-install-cosmos-juno (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27fe72bddd7ee5698a90b2681d3e1802889bb959c6cac112326eb20b2f1d6a02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-sirius-react-bootstrap-weywot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1187ba054fc9b46477a91275100c1ebc2b34469d8a5e8314d2cfb9fe05d71488 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114690

Malicious code in cz-conventional-changelog-express-concurrently-juno npm...

EUVD-2025-121808

Malicious code in spectron-juno-sync-venus npm...

EUVD-2025-111649

Malicious code in lint-staged-sirius-xo-juno npm...

Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141259 Malicious code in cross-env-mongoose-juno-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d4ed32850119f2ab08cc8fcad8533e7034e3c689822c26222db357b516b7554c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124278

Malicious code in norma-html-webpack-plugin-version-juno npm...

EUVD-2025-121902

Malicious code in soap-hyperion-juno-mysql npm...

EUVD-2025-122864

Malicious code in react-bootstrap-envconfig-juno-rate-limiter npm...

EUVD-2025-112082

Malicious code in juno-magellan-acamar-karma npm...

EUVD-2025-112078

Malicious code in juno-pegasus-pegasus-meteor npm...

EUVD-2025-122947

Malicious code in query-nightmare-cz-conventional-changelog-juno npm...

MAL-2025-144032 Malicious code in juno-meissa-electron-builder-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21c5ab002ce179a55f0a3e800837dcb74582c94b814ef5bca6c96140113755f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144023 Malicious code in juno-dactyl-spectron-webdriver-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10155d644f5afcc759ffb2649134e271d66ff9e4bac71be13e262a7c5da6063e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-wasat-npm-semantic-release (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector becd63c258d392909d6d35ad638018409437efb2477de536e766c7b9ccd607c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...