EUVD-2025-177660

Malicious code in neptune-lacerta-accretion-meteor npm...

EUVD-2025-178161

Malicious code in lacerta-polaris-tool-resolvers npm...

EUVD-2025-178143

Malicious code in leda-pm2-lacerta-speleology npm...

EUVD-2025-176077

Malicious code in tachyon-lacerta-relay-mdx npm...

EUVD-2025-179422

Malicious code in dactyl-loopback-axios-lacerta npm...

EUVD-2025-178625

Malicious code in gulp-yildun-lacerta-webpack npm...

EUVD-2025-178163

Malicious code in lacerta-chalk-ini-neptune npm...

EUVD-2025-175743

Malicious code in vega-eclipse-paleoclimatology-lacerta npm...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

EUVD-2025-178165

Malicious code in lacerta-blackhole-juno-capella npm...

Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178166

Malicious code in lacerta-betelgeuse-xanthus-upgrade npm...

EUVD-2025-179067

Malicious code in eris-framework-lacerta-biomimicry npm...

Malicious code in await-lacerta-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3768dcf0227735127c0afebbc782199e7566c7e0b7bd1a357fc0512632645940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dysonswarm-lacerta-unuk-dynamo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1d4ff271822892355055959d5575c07ac632f3836ddd6d8337d4c9f6915e83b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180186

Malicious code in await-lacerta-ganymede-commitizen npm...

EUVD-2025-179909

Malicious code in callback-dynamo-lacerta-chakra-ui npm...

EUVD-2025-179429

Malicious code in cz-conventional-changelog-blitz-steganography-lacerta npm...

EUVD-2025-179221

Malicious code in dysonswarm-lacerta-unuk-dynamo npm...

Malicious code in duplex-lacerta-link-pipe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bade7eb4d1912f4a4adaa57c5a552d18bf4ea7cd965d9d597d05876253f04638 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...