EUVD-2025-176105

Malicious code in supernova-webdriver-mocha-centauri-vega npm...

EUVD-2025-178990

Malicious code in exec-supernova-soap-mongoose npm...

EUVD-2025-179885

Malicious code in capella-cypress-stream-supernova npm...

EUVD-2025-176110

Malicious code in supernova-eridanus-radiant-yakutsk npm...

EUVD-2025-176111

Malicious code in supernova-equinox-singularity-robotics npm...

EUVD-2025-176113

Malicious code in supernova-cosmogenic-buffer-bioinformatics npm...

EUVD-2025-175694

Malicious code in void-oberon-supernova-package npm...

EUVD-2025-176585

Malicious code in run-script-juno-supernova-commitlint npm...

EUVD-2025-176114

Malicious code in supernova-astrophysics-jekyll-webdriver-manager npm...

EUVD-2025-176109

Malicious code in supernova-hyperion-tailwindcss-optimize-css-assets-webpack-plugin npm...

EUVD-2025-179828

Malicious code in centauri-protractor-biosignature-supernova npm...

EUVD-2025-176108

Malicious code in supernova-miranda-ophiuchus-resonance npm...

EUVD-2025-176165

Malicious code in subduction-middleware-javascript-supernova npm...

Malicious code in capella-cypress-stream-supernova (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c056bd7523c0aa7f57aae01ae6f4600c1fe975aa6052ef4a4e77bee80f16db18 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176984

Malicious code in proteomics-terraforming-exosphere-supernova npm...

EUVD-2025-176334

Malicious code in slidev-supernova-pavo-zephyr npm...

EUVD-2025-178620

Malicious code in halley-andromeda-elektra-supernova npm...

EUVD-2025-176116

Malicious code in supernova-apex-brane-callback npm...

EUVD-2025-175870

Malicious code in troposphere-elektra-supernova-antares npm...

Malicious code in slidev-supernova-pavo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28197b94becba6d67bbba6f13af761bbe19a54a265b22921e9d85b9b97d1aa89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...