EUVD-2025-175743

Malicious code in vega-eclipse-paleoclimatology-lacerta npm...

EUVD-2025-178143

Malicious code in leda-pm2-lacerta-speleology npm...

EUVD-2025-176077

Malicious code in tachyon-lacerta-relay-mdx npm...

EUVD-2025-177660

Malicious code in neptune-lacerta-accretion-meteor npm...

EUVD-2025-179422

Malicious code in dactyl-loopback-axios-lacerta npm...

EUVD-2025-176862

Malicious code in quantumfoam-wavefunction-lacerta-singularity npm...

Malicious code in dactyl-loopback-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94ef9b4077e3c6ce19e631255d57d1edaaaa35e2479ccaad486e1d3e0d6f9a3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178163

Malicious code in lacerta-chalk-ini-neptune npm...

EUVD-2025-178625

Malicious code in gulp-yildun-lacerta-webpack npm...

EUVD-2025-178161

Malicious code in lacerta-polaris-tool-resolvers npm...

EUVD-2025-178165

Malicious code in lacerta-blackhole-juno-capella npm...

EUVD-2025-178166

Malicious code in lacerta-betelgeuse-xanthus-upgrade npm...

EUVD-2025-179067

Malicious code in eris-framework-lacerta-biomimicry npm...

Malicious code in await-lacerta-ganymede-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3768dcf0227735127c0afebbc782199e7566c7e0b7bd1a357fc0512632645940 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175998

Malicious code in terser-webpack-plugin-rollup-plugin-cybernetics-lacerta npm...

EUVD-2025-176936

Malicious code in public-jovian-solarnebula-lacerta npm...

EUVD-2025-179429

Malicious code in cz-conventional-changelog-blitz-steganography-lacerta npm...

EUVD-2025-179221

Malicious code in dysonswarm-lacerta-unuk-dynamo npm...

Malicious code in lacerta-auth0-callisto-dorado (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11064afceb6e678c2829e4532c2a26703f08758ccc1c624ce372d6c569a19665 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in leda-pm2-lacerta-speleology (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a15f24a3383d0a2cf2d4910535b0e870d23aaadc1c90c54fe9c449020340802 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...