EUVD-2025-123485

Malicious code in postgres-inquirer-octans-halley npm...

Malicious code in chai-postgres-spica-odin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 86423b10b6f306d99f24e92167c625a39c2149992f37343635ede70b25d42e1c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123117

Malicious code in publish-postgres-despina-start npm...

EUVD-2025-114300

Malicious code in duplex-galaxy-postgres-bellatrix npm...

EUVD-2025-123479

Malicious code in postgres-pavo-tool-procyon npm...

EUVD-2025-115264

Malicious code in colors-corvus-postgres-cli npm...

EUVD-2025-116940

Malicious code in acamar-aether-bunyan-postgres npm...

EUVD-2025-116487

Malicious code in astro-postgres-dependencies-bellatrix npm...

EUVD-2025-111568

Malicious code in loopback-firebase-postgres-luna npm...

EUVD-2025-114543

Malicious code in dependencies-envconfig-bootes-postgres npm...

Malicious code in firebase-leda-octans-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 046135d9533214ad4d91e18be5daabadf580eab15d8555b1898656eb50254295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121811

Malicious code in spectron-docusaurus-nodejs-postgres npm...

Malicious code in loopback-firebase-postgres-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2789696425e4ec276c93faea29470a11265e41a4117bcdbc14f88a208240a63e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123490

Malicious code in postgres-figures-wezen-grus npm...

EUVD-2025-120449

Malicious code in winston-bootes-package-postgres npm...

Malicious code in dotenv-safe-postgres-perseus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 118c548fba36106c65ab5a4047e37654324785d2a7b091b8c04a743d9c47bc8d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124194

Malicious code in oauth-dotenv-safe-sagitta-postgres npm...

EUVD-2025-115913

Malicious code in build-sails-postgres-commitizen npm...

EUVD-2025-123212

Malicious code in proxima-configstore-postgres-altair npm...

Malicious code in bootes-postgres-module-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 87297a5860fcee5829f7e212c41486ad5a4a23f21ca3ba580b5af5d2b4bc41ae This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...