EUVD-2025-121955

Malicious code in sirius-pyxis-cypress-cressida npm...

EUVD-2025-122829

Malicious code in readable-thuban-init-pyxis npm...

EUVD-2025-113452

Malicious code in fornax-unuk-element-ui-pyxis npm...

EUVD-2025-120371

Malicious code in wolf-pyxis-rollup-subscription npm...

EUVD-2025-115237

Malicious code in comet-config-pyxis-blitz npm...

Malicious code in pyxis-karma-sadr-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65565387abe4beae136845f7afff20c393733be49cf9495c468578986e4cace2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hydra-uninstall-cli-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8264502c70e8c00058aa29c0e3045603989b2184e7508d6bea60d5a5b6d037f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122703

Malicious code in release-it-command-express-pyxis npm...

EUVD-2025-123036

Malicious code in pyxis-perseus-release-it-zenobia npm...

EUVD-2025-120077

Malicious code in zenith-mutation-enif-pyxis npm...

EUVD-2025-113693

Malicious code in farout-karma-sqlite-pyxis npm...

EUVD-2025-123031

Malicious code in pyxis-thuban-configstore-meissa npm...

EUVD-2025-112687

Malicious code in husky-pyxis-browserify-ganymede npm...

EUVD-2025-113164

Malicious code in global-pyxis-janus-epimetheus npm...

EUVD-2025-111650

Malicious code in lint-staged-pyxis-webdriver-manager-solis npm...

EUVD-2025-123044

Malicious code in pyxis-helmet-dagda-halley npm...

EUVD-2025-111817

Malicious code in leda-style-loader-pyxis-izar npm...

EUVD-2025-112015

Malicious code in karma-cypress-pyxis-redis npm...

MAL-2025-146892 Malicious code in pyxis-thuban-redis-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4fe69d2b2cf0e8724763b399bd63251ceec89ee464ac621facd41d7e590c4b5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144129 Malicious code in kastra-pyxis-materialize-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50efa6b14b4153be771f26ea3685b03159c5bb0e95dab062461c4e6da40efce9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...