EUVD-2025-177841

Malicious code in middleware-lyra-transport-innercore npm...

EUVD-2025-178591

Malicious code in hawkingradiation-eslint-mantle-lyra npm...

EUVD-2025-175482

Malicious code in xml-eris-lyra-tectonophysics npm...

EUVD-2025-177989

Malicious code in lyra-taphonomy-fusion-exosphere npm...

EUVD-2025-177992

Malicious code in lyra-fomalhaut-arcturus-enceladus npm...

EUVD-2025-178786

Malicious code in gammarayburst-quasarjet-radiometric-lyra npm...

EUVD-2025-177675

Malicious code in nebula-lyra-astrophysics-backend npm...

EUVD-2025-179577

Malicious code in cordelia-cors-lyra-accretion npm...

EUVD-2025-178895

Malicious code in firebase-antd-lyra-version npm...

MAL-2025-186051 Malicious code in centauri-lyra-prompts-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7b9d80123339b9219c56b928dd260db119229c29a605ff5c389d3b57d4a5d7b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187118 Malicious code in gatsby-apollo-sync-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47692086d9bcafefec2a4f2f2b13221504e62731ca39a928a5cdf8089dd14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188627 Malicious code in perseus-lyra-css-minimizer-webpack-plugin-loop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7d3d9b81812427d006a9d83aedc8ab35ae99c772c8d05c7007ddb3d17c3f8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gatsby-apollo-sync-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ee47692086d9bcafefec2a4f2f2b13221504e62731ca39a928a5cdf8089dd14a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180472

Malicious code in aldebaran-lyra-magellan-bulma npm...

EUVD-2025-175788

Malicious code in upgrade-ophiuchus-nightwatch-lyra npm...

EUVD-2025-177987

Malicious code in lyra-xanthus-csrf-pm2 npm...

EUVD-2025-179831

Malicious code in centauri-lyra-prompts-commitlint npm...

EUVD-2025-180509

Malicious code in achernar-elara-flare-lyra npm...

EUVD-2025-180400

Malicious code in apex-charon-lyra-quito npm...

EUVD-2025-178764

Malicious code in gatsby-apollo-sync-lyra npm...