EUVD-2025-124041

Malicious code in ora-draco-phoebe-odin npm...

EUVD-2025-121585

Malicious code in style-loader-rollup-plugin-izar-phoebe npm...

EUVD-2025-114184

Malicious code in electron-phoebe-electron-builder-slides npm...

EUVD-2025-111788

Malicious code in less-loader-phoebe-scripts-mysql npm...

EUVD-2025-123765

Malicious code in phoebe-link-changelog-rollup-plugin npm...

EUVD-2025-116363

Malicious code in auth0-betelgeuse-phoebe-non-blocking npm...

EUVD-2025-123772

Malicious code in phoebe-dotenv-parse-variables-command-tool npm...

EUVD-2025-123779

Malicious code in phoebe-callback-javascript-sequelize npm...

EUVD-2025-123757

Malicious code in phoebe-morgan-install-concurrently npm...

EUVD-2025-124271

Malicious code in norma-sirius-phoebe-jovian npm...

EUVD-2025-120650

Malicious code in wasat-andromeda-phoebe-child-process npm...

EUVD-2025-120279

Malicious code in xenon-neptune-phoebe-stream npm...

EUVD-2025-112721

Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui npm...

EUVD-2025-115202

Malicious code in command-hermes-phoebe-wolf npm...

Malicious code in janus-server-aurora-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8ae2daf5864f511b2fd8658d01350244d0ae648e11c6aab4d1f206632120899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dactyl-postcss-slidev-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2b3e11e1b3e1354449c8d22e5413f49cc8fb31984d234abd2bf4530e6885e9d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123752

Malicious code in phoebe-pavo-grus-pegasus npm...

Malicious code in colors-vortex-phoebe-husky (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df9cf3eb42d2f5ed6e088a87e33540bc56bfed7f1f9ded003fbecbd6a1cc13d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113335

Malicious code in gacrux-phoebe-graphql-dagda npm...

Malicious code in europa-phoebe-publish-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 79b6531932ae429bc67534a297bb4eabb8655acb480e6479c4ac934cda34eba4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...