EUVD-2025-111841

Malicious code in leda-grus-bellatrix-docusaurus npm...

EUVD-2025-113046

Malicious code in grunt-leda-fomalhaut-publish npm...

EUVD-2025-111834

Malicious code in leda-metalsmith-cassini-avior npm...

EUVD-2025-111848

Malicious code in leda-dependencies-fomalhaut-rocket npm...

EUVD-2025-111811

Malicious code in leda-xenos-redis-spinner npm...

EUVD-2025-122317

Malicious code in sagitta-lyra-leda-xml npm...

EUVD-2025-114034

Malicious code in envconfig-leda-websockets-unuk npm...

Malicious code in vulcan-leda-auriga-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5086134f060f78e8bd2666915ded5575a2b0ac781abe295b75d87751eb90fdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120686

Malicious code in vulcan-leda-auriga-antares npm...

EUVD-2025-111815

Malicious code in leda-tethys-webdriver-manager-hexo npm...

EUVD-2025-111831

Malicious code in leda-nodejs-nextjs-sirius npm...

EUVD-2025-120114

Malicious code in yildun-nova-leda-test npm...

EUVD-2025-114586

Malicious code in delphinus-leda-polaris-event npm...

Malicious code in dorado-leda-module-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 473ac230a1d7605a528320678f1622a86249ae3a4271e3a13c1157044eb153a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111997

Malicious code in karma-pipe-leda-ignite npm...

EUVD-2025-111829

Malicious code in leda-phoenix-bellatrix-pegasus npm...

EUVD-2025-123040

Malicious code in pyxis-leda-iota-fornax npm...

Malicious code in jekyll-jasmine-firebase-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cdbb37bda77e42c09b559a883ef4a07bdfb334392fffb8017a7f5a85f82803a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in juno-leda-pino-toml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8243a29c368f8aad9271546a6bf78f1aee26bfa5e3396bf2db32d0c0828de5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111857

Malicious code in leda-andromeda-spectron-neptune npm...