EUVD-2025-176015

Malicious code in telesto-vulcan-chai-cressida npm...

EUVD-2025-175673

Malicious code in vulcan-asthenosphere-babel-exoplanet npm...

EUVD-2025-175668

Malicious code in vulcan-rimraf-sirius-enceladus npm...

Malicious code in vulcan-delphinus-protoplanetarydisk-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b24d971495291e83f1b4c4e45bbbcca2ecbe2a09313935b9aa7b391db4d8be1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-177733

Malicious code in multiverse-terser-webpack-plugin-vulcan-redgiant npm...

EUVD-2025-176623

Malicious code in robotics-callback-vulcan-html-webpack-plugin npm...

EUVD-2025-175672

Malicious code in vulcan-astrobiology-wavefunction-delphinus npm...

EUVD-2025-176493

Malicious code in scorpius-vulcan-postcss-loader-centauri npm...

MAL-2025-190209 Malicious code in vulcan-semantic-release-pino-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72d9e409094829214238543e07bf97ca0de11f012ae732f970551021eb40d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175669

Malicious code in vulcan-quasar-prettier-europa npm...

EUVD-2025-175614

Malicious code in webdriver-manager-neptune-vulcan-scorpius npm...

Malicious code in vulcan-semantic-release-pino-adonis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c72d9e409094829214238543e07bf97ca0de11f012ae732f970551021eb40d66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179434

Malicious code in cypress-geckodriver-vulcan-metalsmith npm...

EUVD-2025-175680

Malicious code in vuepress-winston-deneb-vulcan npm...

EUVD-2025-178014

Malicious code in loop-webdriverio-vulcan-proxima npm...

EUVD-2025-179555

Malicious code in cosmiconfig-biosignature-vulcan-pipe npm...

EUVD-2025-178503

Malicious code in html-webpack-plugin-version-vulcan-rollup npm...

EUVD-2025-176179

Malicious code in string-epimetheus-neptunology-vulcan npm...

EUVD-2025-175667

Malicious code in vulcan-semantic-release-pino-adonis npm...

MAL-2025-190196 Malicious code in vuepress-winston-deneb-vulcan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b680b994c88a74132e41b6149654104412796e59caf936a14b48d70c5e97e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...