EUVD-2025-113205

Malicious code in gemini-nightwatch-janus-lyra npm...

Malicious code in protractor-dynamo-lyra-supervisor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bd3577ae452df631ceffc6b04b9bf8055b4794ac4bc1c794b37786a83638dd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122650

Malicious code in repository-lyra-react-bootstrap-ursa npm...

EUVD-2025-115882

Malicious code in bulma-nodemon-lyra-enceladus npm...

EUVD-2025-122781

Malicious code in regulus-bellatrix-lyra-pavo npm...

EUVD-2025-123763

Malicious code in phoebe-lyra-jovian-pegasus npm...

EUVD-2025-122494

Malicious code in rigel-aldebaran-lyra-nightwatch npm...

EUVD-2025-120815

Malicious code in venus-lyra-fusion-janus npm...

MAL-2025-144614 Malicious code in lyra-phoebe-backend-nestjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2214bbc2a0be5e2df1f0fc62f22f1d89844d530568150a57620e494ac832e21 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111510

Malicious code in lyra-castor-fornax-orbit npm...

EUVD-2025-122954

Malicious code in query-fornax-loop-lyra npm...

EUVD-2025-120151

Malicious code in yakutsk-titan-lyra-impulse npm...

EUVD-2025-116488

Malicious code in astro-phoebe-meissa-lyra npm...

Malicious code in nova-lyra-io-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2254c710bf27a87896d8f269b5f70f1471cab7d40e0d7b2a737b816fef155d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111502

Malicious code in lyra-leda-css-loader-orbit npm...

Malicious code in google-backend-lyra-ophiuchus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b28cb62fe2a152557a0284558db91baf5657ae5209dfe3be3c536704defb5ea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146219 Malicious code in pino-gridsome-lyra-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a33653a4a2d1906d23fa8402fda83edf48872dd0d7af938acf3dd109760577bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-vulcan-lyra-tethys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ed292ee6936e0ee5a9a91b3777a7aa416b690ccdb583cd9256d7c33814053dd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111513

Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda npm...

Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 722f312f9fccae8f0da76301e6a84befc9511acc38679594e3f675350e8437aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...