EUVD-2025-122378

Malicious code in run-script-got-cross-env-yaml npm...

EUVD-2025-111385

Malicious code in markdownlint-standard-run-script-comet npm...

Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115110

Malicious code in commitlint-zenobia-run-script-superagent npm...

EUVD-2025-111595

Malicious code in loglevel-run-script-cross-env-superagent npm...

EUVD-2025-113126

Malicious code in got-run-script-proxima-await npm...

EUVD-2025-116741

Malicious code in altair-pulsar-run-script-procyon npm...

EUVD-2025-120716

Malicious code in vuetify-loop-convict-run-script npm...

EUVD-2025-120322

Malicious code in xanadu-run-script-ceres-loopback npm...

EUVD-2025-116392

Malicious code in aurora-run-script-ophiuchus-rehype npm...

EUVD-2025-124196

Malicious code in oauth-corvus-atlas-run-script npm...

EUVD-2025-114390

Malicious code in dotenv-parse-variables-electron-builder-rocket-run-script npm...

MAL-2025-146311 Malicious code in pm2-run-script-eslint-plugin-leda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a817f06ae0a4d8dc0d41ca305b9e56576f1bd8664d47548dc7532d0c54975083 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122383

Malicious code in run-script-bulma-jupiter-magellan npm...

EUVD-2025-122384

Malicious code in run-script-await-ini-ariel npm...

EUVD-2025-123078

Malicious code in pulsar-run-script-redis-convict npm...

MAL-2025-146419 Malicious code in postcss-procyon-xanadu-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d88030c79380d58aef26fdf412d1babc87d4120c4d6920877f4d389f9dc50bd7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-116586

Malicious code in apollo-indus-run-script-lyra npm...

MAL-2025-144131 Malicious code in kastra-run-script-firebase-blaze (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fc401c10920d96d579d2722526875bac5f60943ac975fdf0410ecc87dc3389e6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...