EUVD-2025-175827

Malicious code in umbriel-paleoanthropology-aldebaran-areology npm...

EUVD-2025-175830

Malicious code in umbriel-gulp-sqlite-shelljs npm...

EUVD-2025-177806

Malicious code in miranda-leda-polaris-umbriel npm...

EUVD-2025-175511

Malicious code in xenobiology-hermes-selenology-umbriel npm...

MAL-2025-187049 Malicious code in framework-umbriel-mongoose-magellan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b42f5a2bf812a423565a8afa97eec03ecb98096dfa30fdb3f61353f872d6dcc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178314

Malicious code in janus-chai-umbriel-install npm...

EUVD-2025-120987

Malicious code in umbriel-hyperion-ignite-quasar npm...

EUVD-2025-123635

Malicious code in playwright-proxima-dactyl-umbriel npm...

EUVD-2025-121167

Malicious code in transform-delphinus-umbriel-pm2 npm...

EUVD-2025-120986

Malicious code in umbriel-indus-cache-prettier-plugin-markdown npm...

EUVD-2025-121573

Malicious code in subscription-cz-conventional-changelog-lint-staged-umbriel npm...

Malicious code in umbriel-fornax-antd-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c1de2a170e3a64a9adcb806038c97af286f9f63038f225d46c3e58a6d5f43055 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114426

Malicious code in docusaurus-yakutsk-library-umbriel npm...

EUVD-2025-124731

Malicious code in morgan-release-it-umbriel-pino-pretty npm...

EUVD-2025-115389

Malicious code in charon-commitlint-config-angular-mdx-umbriel npm...

EUVD-2025-124423

Malicious code in nightwatch-webdriverio-ursa-umbriel npm...

Malicious code in cross-env-umbriel-pyxis-nashira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5c7db902ee42dec10db64f6cd600074b6ceff82d76ba90373dce81b04e3ba617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120984

Malicious code in umbriel-mongodb-pegasus-rocket npm...

EUVD-2025-123425

Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel npm...

EUVD-2025-122282

Malicious code in sails-configstore-umbriel-magellan npm...