EUVD-2025-113594

Malicious code in firebase-tethys-lacerta-phoebe npm...

EUVD-2025-114664

Malicious code in dactyl-lacerta-inquirer-scorpius npm...

EUVD-2025-112348

Malicious code in izar-thuban-lacerta-remark npm...

EUVD-2025-116735

Malicious code in altair-soap-lacerta-kastra npm...

EUVD-2025-111867

Malicious code in lacerta-magellan-sagitta-dotenv npm...

EUVD-2025-113827

Malicious code in europa-nestjs-cosmos-lacerta npm...

EUVD-2025-111145

Malicious code in mini-css-extract-plugin-capella-lacerta-castor npm...

EUVD-2025-111870

Malicious code in lacerta-hyperion-cors-sass-loader npm...

EUVD-2025-111871

Malicious code in lacerta-html-webpack-plugin-socketio-jabbah npm...

EUVD-2025-115875

Malicious code in bulma-tool-yakutsk-lacerta npm...

EUVD-2025-122136

Malicious code in sedna-postcss-gravity-lacerta npm...

EUVD-2025-122250

Malicious code in sass-loader-lacerta-axios-scripts npm...

Malicious code in lacerta-hyperion-cors-sass-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d9832123a085550ecf3b72f0ef1e00f4cde4b0f3289e6500118e6db913e8a61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111873

Malicious code in lacerta-geckodriver-tool-private npm...

Malicious code in thuban-eris-sadr-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afbedbf2b4ed44d816ed2a9def1a28eea2d4b80782ec0d6f39460e743a2a8de4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111865

Malicious code in lacerta-mutation-lyra-loop npm...

EUVD-2025-116077

Malicious code in blaze-lacerta-semantic-ui-yonder npm...

Malicious code in sedna-postcss-gravity-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4518a1db3516a32330ad1a98f283c25f4d297b1556347a4e89b67adacb66de53 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111875

Malicious code in lacerta-electron-gemini-passport npm...

EUVD-2025-115488

Malicious code in chakra-ui-lacerta-tethys-protractor npm...