EUVD-2025-116750

Malicious code in altair-fusion-lyra-nebula npm...

Malicious code in nebula-dactyl-meissa-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01fadf6c26d618a6dc56352d25d762925947927db5f5ea0134c63e3dbdf0bb2f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113338

Malicious code in gacrux-nightwatch-nebula-graphql npm...

Malicious code in nebula-cassini-meissa-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd6b64615720f06f661a16a29fb070139c4ae20bbb8d4fc0453a92394d279176 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143194 Malicious code in hapi-phenomic-cors-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b6f2c548eec7b1c2d839951c25a7b0a8543b92f3c4bcf2e77b2171ec7401b245 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145440 Malicious code in nightmare-nebula-axios-radiant (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2597649307233fc7e02c398dd6aa688e4964b170be8ec32aeaf0852589d735e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121690

Malicious code in sqlite-perseus-nebula-prompts npm...

EUVD-2025-116018

Malicious code in bootes-nebula-cordelia-slides npm...

MAL-2025-145921 Malicious code in package-antares-selenium-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d79c6aa8e6019e1ce2f7b72a55bb1639c2e4c68449fa2efa5c3e3be6054c8114 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143144 Malicious code in halley-grunt-firebase-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec5e454e8b008901ff203e87ca9d360f5d4997b95763ed04d15c985c2691ac69 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147357 Malicious code in rest-nebula-apollo-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b0e592212057e4f165a5bc594516e43446e0dd16e1cd02b54fffe7ff5314842 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121406

Malicious code in terser-ini-sadr-nebula npm...

EUVD-2025-115454

Malicious code in chalk-procyon-nebula-lint npm...

EUVD-2025-124577

Malicious code in nebula-galaxy-aurora-init npm...

EUVD-2025-124583

Malicious code in nebula-cassini-meissa-websockets npm...

EUVD-2025-114703

Malicious code in cypress-repository-rimraf-nebula npm...

EUVD-2025-124481

Malicious code in nightmare-nebula-axios-radiant npm...

EUVD-2025-111196

Malicious code in meteor-kronos-xanthus-nebula npm...

EUVD-2025-112689

Malicious code in husky-ophiuchus-despina-nebula npm...

Malicious code in kastra-nebula-markdown-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ffab07ccf257e2bc8fb5c614300e4c4e456be899800ab9971efec8702b1c11cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...