EUVD-2025-113270

Malicious code in gatsby-exec-foundation-gulp npm...

EUVD-2025-113761

Malicious code in exec-less-commitizen-nextjs npm...

EUVD-2025-123393

Malicious code in private-apex-async-exec npm...

EUVD-2025-113216

Malicious code in gemini-dynamo-mongodb-exec npm...

EUVD-2025-121165

Malicious code in transform-exec-sedna-sagitta npm...

EUVD-2025-116672

Malicious code in antares-perseus-indus-exec npm...

EUVD-2025-115118

Malicious code in commitlint-jovian-exec-figures npm...

EUVD-2025-114143

Malicious code in element-ui-exec-magellan-aurora npm...

EUVD-2025-116478

Malicious code in async-europa-exec-solis npm...

EUVD-2025-116822

Malicious code in aldebaran-grus-playwright-exec npm...

EUVD-2025-111609

Malicious code in loglevel-cross-env-exec-update npm...

EUVD-2025-113753

Malicious code in exec-parcel-tailwindcss-markdown npm...

EUVD-2025-112637

Malicious code in hyperion-grus-aether-exec npm...

EUVD-2025-113770

Malicious code in exec-fusion-backend-corvus npm...

EUVD-2025-116298

Malicious code in await-proxima-mui-exec npm...

Malicious code in ursa-juno-nodejs-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112908

Malicious code in heka-exec-terser-webpack-plugin-start npm...

Malicious code in antares-perseus-indus-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e171dc30c5618b4fb6ccfc0b3dc6ebf43932d473dddf05dff6be591c1695b8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in transform-exec-sedna-sagitta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c197068d113d6fb425ad560ce788a7d3859d52375822f5b3b1355ca92c26473 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in await-proxima-mui-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d2d650a20b5908dc81ddf5fe514abf51c8ed0990e33cfb1fe510b4db247ea4ee This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...