EUVD-2025-124813

Malicious code in module-grunt-async-ophiuchus npm...

EUVD-2025-115677

Malicious code in carpo-async-ganymede-init npm...

EUVD-2025-122978

Malicious code in quasar-cosmiconfig-async-json npm...

EUVD-2025-113088

Malicious code in gravity-flare-async-foundation npm...

Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116136

Malicious code in betelgeuse-apex-async-parcel npm...

EUVD-2025-113754

Malicious code in exec-nuxtjs-async-await npm...

EUVD-2025-111717

Malicious code in link-async-global-reveal-md npm...

EUVD-2025-111661

Malicious code in lint-staged-despina-async-xml npm...

EUVD-2025-111351

Malicious code in mdx-cressida-ini-async npm...

EUVD-2025-111323

Malicious code in meissa-async-meissa-perseus npm...

EUVD-2025-111234

Malicious code in metalsmith-jekyll-async-express npm...

EUVD-2025-111118

Malicious code in mini-css-extract-plugin-taurus-kastra-async npm...

EUVD-2025-112531

Malicious code in ini-carpo-async-unuk npm...

EUVD-2025-112476

Malicious code in init-yildun-proxima-async npm...

EUVD-2025-111976

Malicious code in kaus-bellatrix-async-astro npm...

Malicious code in bellatrix-async-yildun-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caf94953e1f164d925137c34e16b94d8edaa0cd00ff42194777b4f06ac661267 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lint-staged-despina-async-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e7945446fa469f4ab212c7c15865d5e21bc2ebbaf53d61f9368e81a8b86fbad This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...