Malicious code in nebula-oauth-resolvers-dotenv-safe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcbb20f31c5b164bf496adf4620bdcd31e215eb10360856e0636cfdc32a80dea This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113366

Malicious code in fusion-restart-koa-nebula npm...

EUVD-2025-112870

Malicious code in helios-vuetify-deneb-nebula npm...

EUVD-2025-111683

Malicious code in link-yonder-nebula-centaurus npm...

EUVD-2025-121031

Malicious code in ultra-gridsome-aldebaran-nebula npm...

EUVD-2025-112903

Malicious code in heka-nebula-rollup-plugin-inquirer npm...

EUVD-2025-114079

Malicious code in enceladus-nebula-fornax-betelgeuse npm...

EUVD-2025-112032

Malicious code in jwt-nebula-module-colors npm...

EUVD-2025-116152

Malicious code in bellatrix-pino-nebula-comet npm...

Malicious code in rehype-solis-nebula-rehype (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67037ea358d27c563606ff22bbd2be9c33e69c299f6f661e4055e6f94dee4d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nebula-cassini-meissa-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b64615720f06f661a16a29fb070139c4ae20bbb8d4fc0453a92394d279176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in relay-nebula-redis-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 499bec31780f82ad624282d3562836cf8b9c2f15f678fdef4cfc840fb1c8749a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116241

Malicious code in babel-init-element-ui-nebula npm...

EUVD-2025-124581

Malicious code in nebula-dactyl-meissa-postgres npm...

EUVD-2025-124571

Malicious code in nebula-phoebe-sadr-spectron-webdriver npm...

EUVD-2025-111989

Malicious code in kastra-nebula-markdown-delphinus npm...

Malicious code in astro-request-sequelize-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7d0615cdf2e022eb8e309a233fa7d06b1ed30941236bf8c92a29027db49a27c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112622

Malicious code in hyperion-nebula-eleventy-betelgeuse npm...

EUVD-2025-121002

Malicious code in umbra-nebula-metalsmith-gatsby npm...

Malicious code in barnard-nebula-altair-gulp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d371224236e78d1bf077551b6a3e5eada33e7a51cafbbfc732804d200f8d6f6a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...