EUVD-2025-120206

Malicious code in xerxes-xo-solis-dactyl npm...

EUVD-2025-120209

Malicious code in xerxes-testcafe-sqlite-axios npm...

EUVD-2025-123413

Malicious code in prettier-stylelint-mensa-xerxes-ophiuchus npm...

Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in xerxes-chromedriver-query-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d823f1f1e63d055ff00a2f0178f8285f6d4c179044f1e950e9003575ff523cb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123616

Malicious code in pm2-pegasus-leda-xerxes npm...

EUVD-2025-111488

Malicious code in magellan-cli-despina-xerxes npm...

EUVD-2025-112614

Malicious code in hyperion-scorpius-xerxes-cli npm...

Malicious code in fusion-xerxes-comet-auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf07766d12753bced2182938a506ecdf512d8e1d4fb358d5195008a425611e27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120224

Malicious code in xerxes-gridsome-postcss-loader-google npm...

Malicious code in xerxes-scripts-server-wezen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5da423f5c1c3148385336407529bca6153fa96601de140232a83d91babc96745 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124649

Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes npm...

EUVD-2025-111275

Malicious code in meissa-xerxes-ora-mira npm...

EUVD-2025-124816

Malicious code in module-envconfig-xerxes-server npm...

EUVD-2025-114308

Malicious code in draco-xerxes-parcel-browserify npm...

EUVD-2025-113971

Malicious code in equinox-xerxes-convict-ignite npm...

EUVD-2025-124396

Malicious code in node-config-xerxes-cz-conventional-changelog-rehype npm...

EUVD-2025-113222

Malicious code in geckodriver-xerxes-capella-luna npm...

EUVD-2025-115218

Malicious code in comet-spawn-oberon-xerxes npm...

MAL-2025-149712 Malicious code in xerxes-ora-neptune-dotenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb0059a18193b612f677898d5f447772d729b943e67241154d60529dbf2036a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...