EUVD-2025-122680

Malicious code in remark-async-development-exec npm...

EUVD-2025-121871

Malicious code in socketio-geckodriver-child-process-exec npm...

EUVD-2025-123454

Malicious code in prettier-fornax-exec-halley npm...

EUVD-2025-114457

Malicious code in dione-tool-exec-achernar npm...

EUVD-2025-113748

Malicious code in exec-thuban-farout-xanadu npm...

EUVD-2025-120819

Malicious code in venus-exec-sagitta-ophiuchus npm...

Malicious code in spica-eris-spica-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b8fc462d3d14f04b10e59cf89cab9fe1da14d121a76001f960b85f460b21562 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124603

Malicious code in nconf-exec-blitz-node-config npm...

EUVD-2025-123856

Malicious code in perseus-adonis-bootstrap-exec npm...

Malicious code in neptune-exec-radiant-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce87bf0b08a74698999d56c5a3296ebdabc37d9c80495022b80d53ee5f989239 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113750

Malicious code in exec-sass-loader-acamar-halley npm...

EUVD-2025-116027

Malicious code in bootes-deneb-exec-axios npm...

EUVD-2025-123431

Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec npm...

EUVD-2025-124559

Malicious code in neptune-exec-radiant-wasat npm...

Malicious code in winston-telesto-update-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c13b0f31224fe8724da5f01db3414046e77f8b195722134872776dde5942a5b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122555

Malicious code in rest-sqlite-exec-hugo npm...

EUVD-2025-122575

Malicious code in rest-exec-graphql-algol npm...

EUVD-2025-121460

Malicious code in taurus-exec-javascript-repository npm...

EUVD-2025-121669

Malicious code in standard-markdown-pdf-lyra-exec npm...