EUVD-2025-111860

Malicious code in lacerta-vulcan-lacerta-hercules npm...

EUVD-2025-120685

Malicious code in vulcan-lyra-cassini-local npm...

EUVD-2025-121162

Malicious code in transform-jwt-vulcan-dione npm...

EUVD-2025-120676

Malicious code in vulcan-scripts-leda-websockets npm...

EUVD-2025-114940

Malicious code in corvus-webdriver-manager-vulcan-upgrade npm...

EUVD-2025-112076

Malicious code in juno-sadr-geckodriver-vulcan npm...

EUVD-2025-120695

Malicious code in vulcan-fork-colors-neptune npm...

EUVD-2025-113111

Malicious code in graphql-deimos-vulcan-helios npm...

Malicious code in mini-css-extract-plugin-callisto-vulcan-apex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4fefa2b8aac08eb3db27624e6a94ba26bdf920229211f6b3eeda2ce26bd6c4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120692

Malicious code in vulcan-gulp-ora-browserify npm...

EUVD-2025-111223

Malicious code in metalsmith-vulcan-lint-staged-acamar npm...

Malicious code in vulcan-graphql-sadr-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b28fd7869c1e84447ed5bb31e1a38bd35e970545d9af54c68a3ce47e58301765 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120672

Malicious code in vulcan-triton-procyon-vulcan npm...

EUVD-2025-120689

Malicious code in vulcan-init-pino-pretty-geckodriver npm...

EUVD-2025-120679

Malicious code in vulcan-query-vulcan-venus npm...

EUVD-2025-120705

Malicious code in vulcan-blitz-got-configstore npm...

EUVD-2025-120698

Malicious code in vulcan-eslint-plugin-aurora-deneb npm...

EUVD-2025-123477

Malicious code in postgres-phoebe-vulcan-algol npm...

EUVD-2025-115214

Malicious code in comet-vulcan-mdx-pino npm...

Malicious code in grus-vulcan-postcss-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36086da343f1f0070583626b0a77247b177ec3186f1550f7756ef30c223b78a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...