EUVD-2025-112816

Malicious code in hercules-shelljs-xerxes-janus npm...

EUVD-2025-112003

Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin npm...

EUVD-2025-122009

Malicious code in shelljs-heka-sass-loader-gemini npm...

EUVD-2025-121991

Malicious code in shelljs-warp-mongoose-betelgeuse npm...

EUVD-2025-122007

Malicious code in shelljs-install-shelljs-proxima npm...

EUVD-2025-114598

Malicious code in delphinus-ariel-apex-shelljs npm...

MAL-2025-140120 Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116663

Malicious code in antares-shelljs-vega-version npm...

MAL-2025-141329 Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ea601fe32f2986c24cf6764da27b039900a4f81ff22922b1697d5543d1533f8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122013

Malicious code in shelljs-chai-remark-delphinus npm...

EUVD-2025-121179

Malicious code in tool-proxima-shelljs-corvus npm...

EUVD-2025-113718

Malicious code in express-titan-andromeda-shelljs npm...

EUVD-2025-115682

Malicious code in carina-rocket-shelljs-rimraf npm...

EUVD-2025-115000

Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin npm...

EUVD-2025-114310

Malicious code in draco-wasat-neptune-shelljs npm...

EUVD-2025-124456

Malicious code in nightwatch-element-ui-wezen-shelljs npm...

MAL-2025-147930 Malicious code in shelljs-ultra-venus-stop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9801de5bef0e92a080f705b4bb2e883cb39029e1d4442212140cd55decd2c408 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121994

Malicious code in shelljs-tailwindcss-lint-proxima npm...

EUVD-2025-111441

Malicious code in magellan-webdriverio-shelljs-inquirer npm...

Malicious code in shelljs-ursa-fornax-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 54ce1c16c26faee6a4719982db27d0f6c9f0f3d15357bdea35f8156aeb8e2745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...