EUVD-2025-124041

Malicious code in ora-draco-phoebe-odin npm...

EUVD-2025-123776

Malicious code in phoebe-ceres-terser-pavo npm...

EUVD-2025-114799

Malicious code in css-loader-phenomic-phoebe-node-config npm...

EUVD-2025-123563

Malicious code in polaris-phoebe-materialize-lynx npm...

EUVD-2025-123778

Malicious code in phoebe-celeste-luna-equinox npm...

Malicious code in phoebe-pipe-repository-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5e5e991ebc3e6935e559da0f12e7cd8d6efbb7868d545cd595a7f3e7aee0ddf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hermes-apex-css-minimizer-webpack-plugin-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 570dbfa873169c709ec4b57caa73790937ba24933a3e08d336ce19611108edfb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114638

Malicious code in dagda-heka-phoebe-quantum npm...

EUVD-2025-124271

Malicious code in norma-sirius-phoebe-jovian npm...

EUVD-2025-113594

Malicious code in firebase-tethys-lacerta-phoebe npm...

EUVD-2025-124817

Malicious code in module-cypress-phoebe-process npm...

EUVD-2025-120116

Malicious code in yildun-lint-staged-octans-phoebe npm...

EUVD-2025-123762

Malicious code in phoebe-mensa-commitizen-juno npm...

EUVD-2025-114683

Malicious code in cz-conventional-changelog-phenomic-uninstall-phoebe npm...

Malicious code in vuetify-puppeteer-stream-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4303bb98a1d550e8a4711121441236381921c720fac30b199e2d777750f88890 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115215

Malicious code in comet-tethys-phoebe-canopus npm...

EUVD-2025-123741

Malicious code in phoebe-sass-loader-luna-reveal-md npm...

EUVD-2025-111501

Malicious code in lyra-phoebe-backend-nestjs npm...

Malicious code in phoebe-fusion-soap-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22f0820b09c7cdfefb0d7d118c8e8b2ecae5f922d629da09c23570bbd6543da This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...