EUVD-2025-178660

Malicious code in greatfilter-nova-morgan-private npm...

EUVD-2025-178951

Malicious code in express-terraforming-nucleosynthesis-nova npm...

EUVD-2025-177817

Malicious code in miranda-borealis-nova-dotenv-safe npm...

EUVD-2025-177850

Malicious code in meteor-singularitarianism-procyon-nova npm...

Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176460

Malicious code in sedna-nova-readable-levels npm...

Malicious code in nova-astro-playwright-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be6aa5807609425f2a33e522f29ae44baadab83adcc49c1bc3035527e455cbd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in publish-nova-helios-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de8dd1b8b7d8d8cd82eb001ee8781283fc8c4cc24cd0e42f85a14b4f40911a47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176255

Malicious code in speleology-phenomic-nova-resonance npm...

EUVD-2025-179518

Malicious code in cosmos-volcanology-cassini-nova npm...

MAL-2025-186337 Malicious code in cosmicray-nova-regulus-eleventy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 629a39b0a9e899a2c00667e031e0aa1a1416eb7626b9123e8f696be447ca89b1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124261

Malicious code in nova-json-terser-vega npm...

EUVD-2025-124268

Malicious code in nova-centaurus-telesto-aquarius npm...

EUVD-2025-116187

Malicious code in barnard-nova-sass-loader-configstore npm...

EUVD-2025-124256

Malicious code in nova-protractor-nightmare-quark npm...

EUVD-2025-112431

Malicious code in install-rimraf-nova-antares npm...

EUVD-2025-111571

Malicious code in loopback-changelog-nova-deimos npm...

EUVD-2025-124264

Malicious code in nova-delphinus-npm-janus npm...

EUVD-2025-113145

Malicious code in google-nova-spectron-webdriver-config npm...

Malicious code in rollup-nova-inquirer-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f33f361a42c5d6ef8fae97296eb72132192a355ff8bbb783c6031b36c63d437 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...