EUVD-2025-177211

Malicious code in phoebe-global-google-yakutsk npm...

Malicious code in yakutsk-luna-nova-triton (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1247a887e7b5c2f9fd964d4f486657e8b0b2f0cb3db19d32b6971e95515ac6f0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175404

Malicious code in zephyr-yakutsk-update-fornax npm...

EUVD-2025-175457

Malicious code in yakutsk-saturnology-grus-prosthetics npm...

EUVD-2025-179573

Malicious code in cordelia-websockets-yakutsk-quark npm...

EUVD-2025-176762

Malicious code in redshift-deimos-neptune-yakutsk npm...

MAL-2025-190418 Malicious code in yakutsk-metalsmith-astrochemistry-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 716ae5e8aa43202b32c8b4a3aa8cf544d3e6ad69c383911d5515b92e5ed44899 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in yakutsk-blueshift-supervisor-socketio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8265e7cc3ce2aa13db6c24fbe72eef89e0b1aebe54afa3c2299c0f4527b734f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179510

Malicious code in cressida-yakutsk-zephyr-rollup npm...

EUVD-2025-179314

Malicious code in despina-lightyear-yakutsk-jwt npm...

EUVD-2025-175456

Malicious code in yakutsk-server-hydrogeology-saturnology npm...

EUVD-2025-178168

Malicious code in kuiperbelt-yakutsk-bioinformatics-express npm...

Malicious code in websockets-thuban-antares-yakutsk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65019be03a37451ba468ab0bec426af96f0ebcac58d786c0822fa0a5077acfd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179396

Malicious code in darkmatter-exosphere-exoplanetology-yakutsk npm...

EUVD-2025-176110

Malicious code in supernova-eridanus-radiant-yakutsk npm...

EUVD-2025-179171

Malicious code in elektra-yakutsk-cosmicray-phoenix npm...

MAL-2025-186309 Malicious code in cordelia-websockets-yakutsk-quark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d647c58f0a661436c26cd8beb4a3828948c14da4a4c99f2bbe55d3e02b0c14e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175579

Malicious code in websockets-thuban-antares-yakutsk npm...

EUVD-2025-175459

Malicious code in yakutsk-luna-nova-triton npm...

EUVD-2025-175462

Malicious code in yakutsk-alphard-winston-nconf npm...