EUVD-2025-175406

Malicious code in zephyr-promise-morgan-indus npm...

EUVD-2025-176130

Malicious code in superagent-zephyr-technosignature-passport npm...

EUVD-2025-175413

Malicious code in zephyr-ganymede-fomalhaut-hercules npm...

Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178988

Malicious code in exec-zephyr-xo-izar npm...

EUVD-2025-175410

Malicious code in zephyr-local-hexo-meteor npm...

EUVD-2025-178866

Malicious code in forever-zephyr-pavo-slides npm...

Malicious code in slidev-supernova-pavo-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28197b94becba6d67bbba6f13af761bbe19a54a265b22921e9d85b9b97d1aa89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-176880

Malicious code in quantum-computing-eslint-plugin-zephyr-loopback npm...

EUVD-2025-179898

Malicious code in callback-zephyr-semantic-ui-carpo npm...

EUVD-2025-178611

Malicious code in halley-subduction-zephyr-paleoclimatology npm...

MAL-2025-190462 Malicious code in zephyr-eris-spinner-quasar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea671283f01b35babb5106204769694d41bcf70685cd9e595382d0728e80f627 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116319

Malicious code in avior-rollup-stop-zephyr npm...

EUVD-2025-123151

Malicious code in public-zephyr-neptune-bulma npm...

EUVD-2025-114401

Malicious code in dotenv-meissa-zephyr-kronos npm...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123216

Malicious code in proxima-auriga-luna-zephyr npm...

EUVD-2025-111959

Malicious code in kaus-sagitta-less-zephyr npm...

EUVD-2025-120043

Malicious code in zephyr-lynx-stop-pyxis npm...

EUVD-2025-116408

Malicious code in auriga-zephyr-cosmiconfig-shelljs npm...