Malicious Package

Overview hexo-norma-cygnus-child-process is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...

EUVD-2025-177538

Malicious code in norma-tool-stratigraphy-stop npm...

EUVD-2025-177740

Malicious code in mui-norma-callisto-terser-webpack-plugin npm...

EUVD-2025-177792

Malicious code in mocha-solis-zenobia-norma npm...

EUVD-2025-179700

Malicious code in cluster-norma-solarnebula-outercore npm...

EUVD-2025-178780

Malicious code in ganymede-levels-changelog-norma npm...

EUVD-2025-179665

Malicious code in comet-norma-semantic-release-rest npm...

EUVD-2025-177134

Malicious code in playwright-asthenosphere-norma-cassini npm...

Malicious code in norma-tool-stratigraphy-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9cc0d54c69ea8d5d3fb2526b4c3613bc17ab6bd6c2ce8287d64c44fa51ff62cc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179892

Malicious code in callisto-hyperion-norma-firebase npm...

EUVD-2025-177234

Malicious code in petrology-prettier-sirius-norma npm...

Malicious code in buffer-aldebaran-norma-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31792aa342017830dbe9af17d27809aea53e779e60fc233245daddf3fb3f607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177494

Malicious code in octans-cybernetics-carpo-norma npm...

EUVD-2025-177540

Malicious code in norma-quantumfoam-loglevel-commitizen npm...

EUVD-2025-177229

Malicious code in phenomic-got-norma-gravity npm...

EUVD-2025-179259

Malicious code in dotenv-safe-norma-vuetify-paleomagnetism npm...

EUVD-2025-175450

Malicious code in yaml-iota-jasmine-norma npm...

MAL-2025-185919 Malicious code in buffer-aldebaran-norma-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 31792aa342017830dbe9af17d27809aea53e779e60fc233245daddf3fb3f607d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178719

Malicious code in geodynamo-hydrogeology-ultra-norma npm...

MAL-2025-188142 Malicious code in mui-norma-callisto-terser-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e50dd2b2d8d78ce8e36999c312857463758a39ad904e094dc54163e473bf5c54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...