EUVD-2025-121131

Malicious code in transport-postgres-slidev-install npm...

EUVD-2025-112905

Malicious code in heka-lint-pulsar-install npm...

EUVD-2025-112433

Malicious code in install-pyxis-rest-prettier npm...

EUVD-2025-112332

Malicious code in jabbah-leda-install-eslint-config npm...

EUVD-2025-112974

Malicious code in halley-enceladus-install-carpo npm...

EUVD-2025-122157

Malicious code in sedna-grus-install-zenith npm...

EUVD-2025-112356

Malicious code in izar-kronos-install-epimetheus npm...

EUVD-2025-112424

Malicious code in install-uninstall-eridanus-nightwatch npm...

EUVD-2025-112437

Malicious code in install-europa-aquarius-cli npm...

EUVD-2025-121533

Malicious code in supervisor-install-postgres-node-sass npm...

EUVD-2025-123388

Malicious code in private-install-radiant-version npm...

EUVD-2025-112422

Malicious code in install-writable-centaurus-wolf npm...

EUVD-2025-112429

Malicious code in install-sagitta-forever-repository npm...

EUVD-2025-123018

Malicious code in quantum-install-puppeteer-link npm...

Malicious code in materialize-europa-install-query (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c34f5b580e515d57b2f97959e41b59126793c501180fdc1ce97b11c5f06699d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in halley-enceladus-install-carpo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1252fa09c8e3f5e289551c8ef29c7568a2f3a15d611100b3bc20fc8b90dae2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-rimraf-install-rollup-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a20fc42722644aab92bd2ddc6bca3420470cac4cf0326c16962a9a81849fad0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115699

Malicious code in carina-draco-install-convict npm...

EUVD-2025-122073

Malicious code in semantic-ui-kaus-install-centaurus npm...

MAL-2025-143781 Malicious code in jabbah-leda-install-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d12f6206cdd8066e12c04469916390bf6e9c7de288ef09cf420a09ead8c87823 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...