EUVD-2025-111539

Malicious code in luna-pegasus-nconf-zephyr npm...

EUVD-2025-112109

Malicious code in jsonp-pegasus-metalsmith-dynamo npm...

EUVD-2025-123895

Malicious code in pegasus-envconfig-wasat-supervisor npm...

EUVD-2025-121556

Malicious code in subscription-zephyr-exec-pegasus npm...

EUVD-2025-111829

Malicious code in leda-phoenix-bellatrix-pegasus npm...

EUVD-2025-112078

Malicious code in juno-pegasus-pegasus-meteor npm...

EUVD-2025-122564

Malicious code in rest-nextjs-pegasus-colors npm...

EUVD-2025-121021

Malicious code in ultra-sass-loader-pegasus-auriga npm...

EUVD-2025-123877

Malicious code in pegasus-nuxtjs-nightwatch-rigel npm...

EUVD-2025-121107

Malicious code in triton-pegasus-less-loader-antares npm...

EUVD-2025-115324

Malicious code in chromedriver-xml-pegasus-changelog npm...

EUVD-2025-123861

Malicious code in pegasus-terser-webpack-plugin-less-loader-atlas npm...

Malicious code in jovian-pegasus-fork-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b69d19a2d6e02cc5e034b684051a6916cd908bb4104d27c1e3137f97d1def607 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123903

Malicious code in pegasus-backend-event-install npm...

EUVD-2025-120984

Malicious code in umbriel-mongodb-pegasus-rocket npm...

EUVD-2025-123866

Malicious code in pegasus-spinner-google-cache npm...

Malicious code in perseus-blaze-pegasus-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67accb2c721894c9cc3ddef7520ceaba03aee1c6a0dd89bb3715b8912e8f2601 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115448

Malicious code in chalk-ursa-leda-pegasus npm...

EUVD-2025-123893

Malicious code in pegasus-forever-jwt-cache npm...

Malicious code in alphard-pegasus-server-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfa461d7d0894f0839cb8ce6a4066ce402a451d1bbad3c07e5b954c8e025915 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...