EUVD-2025-121990

Malicious code in sirius-antares-quito-meissa npm...

EUVD-2025-111636

Malicious code in lint-yaml-sirius-soap npm...

EUVD-2025-120626

Malicious code in wasat-terser-sirius-aldebaran npm...

Malicious code in canopus-writable-acamar-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44d3dd08d49d109a4903d040371041d4d3b34ded3e4e3be67ac6828ba2fb33f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123559

Malicious code in polaris-postgres-sirius-ursa npm...

EUVD-2025-116912

Malicious code in acamar-vuepress-ursa-sirius npm...

EUVD-2025-113263

Malicious code in gatsby-redis-sirius-halley npm...

EUVD-2025-123142

Malicious code in publish-concurrently-gacrux-sirius npm...

EUVD-2025-114769

Malicious code in csv-ariel-sirius-wezen npm...

EUVD-2025-122304

Malicious code in sagitta-sirius-express-async npm...

EUVD-2025-120064

Malicious code in zenobia-markdown-pdf-sirius-inquirer npm...

EUVD-2025-121972

Malicious code in sirius-gatsby-subscription-nodemon npm...

EUVD-2025-114865

Malicious code in cressida-sirius-rocket-fornax npm...

EUVD-2025-124468

Malicious code in nightwatch-achernar-cordelia-sirius npm...

Malicious code in sirius-enceladus-bellatrix-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e530e5b1384b71d0aa8cc8e419d85370353356e6c409a60c05f1a478aa4293b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121100

Malicious code in triton-sirius-redis-eslint npm...

EUVD-2025-113176

Malicious code in global-got-sirius-antd npm...

EUVD-2025-115602

Malicious code in celeste-cressida-sirius-cli npm...

EUVD-2025-112559

Malicious code in impulse-sirius-quantum-local npm...

Malicious code in celeste-cressida-sirius-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc225a509c12ef0192954308f084c3a6d29def818adcdadb80c204a0e75f04a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...