EUVD-2025-124490

Malicious code in nightmare-cli-ursa-phenomic npm...

Malicious code in nightmare-node-config-update-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd8c2d285958d9e9c1654d8bb5b3806e3a886b0e3cba0e0e869ed94a7b861673 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122134

Malicious code in sedna-publish-nightmare-terser npm...

EUVD-2025-123729

Malicious code in phoenix-achernar-nightmare-eridanus npm...

EUVD-2025-124469

Malicious code in nightmare-xanthus-axios-levels npm...

EUVD-2025-122636

Malicious code in repository-xanadu-pyxis-nightmare npm...

EUVD-2025-116753

Malicious code in altair-css-loader-fornax-nightmare npm...

EUVD-2025-120134

Malicious code in yaml-nightmare-command-start npm...

EUVD-2025-121098

Malicious code in triton-warp-sadr-nightmare npm...

Malicious code in nightmare-commitlint-gridsome-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c60aa6aec35ec6010e77c3d71c3595b87474291491c99d10e62a764eab91e9a4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124479

Malicious code in nightmare-node-config-eridanus-configstore npm...

Malicious code in triton-warp-sadr-nightmare (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35331c67a6aab3844581bef9af31dc1788bfa6ce621c2bc35bf4a872a88a6cd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116213

Malicious code in backend-hyperion-nightmare-pipe npm...

EUVD-2025-123361

Malicious code in process-nightmare-corvus-google npm...

EUVD-2025-115674

Malicious code in carpo-blitz-nightmare-forever npm...

EUVD-2025-124481

Malicious code in nightmare-nebula-axios-radiant npm...

EUVD-2025-114381

Malicious code in dotenv-parse-variables-nightmare-aether-run-script npm...

EUVD-2025-124487

Malicious code in nightmare-envconfig-nestjs-firebase npm...

Malicious code in radiant-nightmare-xo-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c61b5919ccdc6ceec342de4c981a1542a5edda541b184e746f033085bde9a32 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a93d0c499421d82973f4df93cf56abf3d08dc50da7eed95c154c8b6566c2cc6c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...