EUVD-2025-111706

Malicious code in link-gravity-cache-lyra npm...

EUVD-2025-122894

Malicious code in rate-limiter-acamar-cache-prettier-plugin-markdown npm...

EUVD-2025-111852

Malicious code in leda-command-superagent-cache npm...

EUVD-2025-115806

Malicious code in callback-levels-cz-conventional-changelog-cache npm...

EUVD-2025-116833

Malicious code in aldebaran-cache-repository-npm npm...

Malicious code in telesto-zephyr-cache-vuetify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33571405bfa84576d662602f2683b141983534b474d08b251713f2786dc45183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115366

Malicious code in charon-yakutsk-elektra-cache npm...

Malicious code in cache-centaurus-dagda-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 37fbf47d332c11cd772a9c718e7d3d8090f04a3a7423768d277ba1289693344d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112755

Malicious code in html-webpack-plugin-cache-spawn-jovian npm...

Malicious code in winston-cache-stop-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e071bb2c1f6703bd47158b0614599e4b4b79ec46dff64657405fff609fcec1d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115836

Malicious code in cache-eridanus-auth-perseus npm...

Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123749

Malicious code in phoebe-prompts-hercules-cache npm...

EUVD-2025-115816

Malicious code in cache-xo-ini-wolf npm...

EUVD-2025-114745

Malicious code in cygnus-cache-magellan-run-script npm...

EUVD-2025-113329

Malicious code in gacrux-style-loader-cache-comet npm...

EUVD-2025-123866

Malicious code in pegasus-spinner-google-cache npm...

EUVD-2025-121966

Malicious code in sirius-lacerta-cache-callisto npm...

EUVD-2025-115820

Malicious code in cache-telesto-antares-iota npm...

Malicious code in cache-ophiuchus-node-config-browserify (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0b0d81771865bb974c560ebcce579067abe56418b4aab7d7db4414d5caf5ac0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...