EUVD-2025-121233

Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis npm...

EUVD-2025-122832

Malicious code in readable-pulsar-umbra-pegasus npm...

EUVD-2025-120993

Malicious code in umbra-yaml-castor-axios npm...

EUVD-2025-113685

Malicious code in farout-supervisor-phoebe-umbra npm...

EUVD-2025-121011

Malicious code in umbra-enif-node-sass-html-webpack-plugin npm...

EUVD-2025-121006

Malicious code in umbra-meissa-yaml-radiant npm...

EUVD-2025-120034

Malicious code in zephyr-umbra-eleventy-rehype npm...

EUVD-2025-122179

Malicious code in scripts-prompts-umbra-charon npm...

EUVD-2025-120997

Malicious code in umbra-package-phoebe-version npm...

EUVD-2025-123759

Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra npm...

EUVD-2025-115274

Malicious code in cluster-nodemon-hexo-umbra npm...

Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123268

Malicious code in promise-umbra-achernar-child-process npm...

EUVD-2025-112613

Malicious code in hyperion-sedna-umbra-ursa npm...

EUVD-2025-116688

Malicious code in antares-helios-umbra-prettier-plugin-markdown npm...

EUVD-2025-121003

Malicious code in umbra-mutation-morgan-async npm...

Malicious code in umbra-cors-electron-oauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b2b92bcd7188d16cd76c7ccf6208ce4d10b1301c8af83f2759ed6ef2e0bb796 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141785 Malicious code in dotenv-umbra-duplex-proxima (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e7856ae4344190b8cebd05e3bc90206bc14a97511ec4db990ba37d2fe943a29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146162 Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c7758742d6ce3f84c41f899059c9fa2f6d10ec4d81abe2446f4316493355a77 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140048 Malicious code in blitz-koa-umbra-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 737b7cf294e87c05036c5c575e26b364c9f2e68a45faceeedc422a66b098830d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...