EUVD-2025-116027

Malicious code in bootes-deneb-exec-axios npm...

Malicious code in ursa-juno-nodejs-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd78b3ae86055614a45cad30a7916cb464db48029adf52a52105786f10ee47f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115118

Malicious code in commitlint-jovian-exec-figures npm...

EUVD-2025-113216

Malicious code in gemini-dynamo-mongodb-exec npm...

EUVD-2025-113761

Malicious code in exec-less-commitizen-nextjs npm...

EUVD-2025-120401

Malicious code in winston-telesto-update-exec npm...

Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123132

Malicious code in publish-jekyll-miranda-exec npm...

EUVD-2025-120242

Malicious code in xenos-run-script-weywot-exec npm...

EUVD-2025-124559

Malicious code in neptune-exec-radiant-wasat npm...

EUVD-2025-121871

Malicious code in socketio-geckodriver-child-process-exec npm...

EUVD-2025-113748

Malicious code in exec-thuban-farout-xanadu npm...

EUVD-2025-113772

Malicious code in exec-enceladus-axios-eslint-config npm...

EUVD-2025-121764

Malicious code in spica-eris-spica-exec npm...

EUVD-2025-116216

Malicious code in backend-exec-readable-vulcan npm...

EUVD-2025-123393

Malicious code in private-apex-async-exec npm...

EUVD-2025-122680

Malicious code in remark-async-development-exec npm...

EUVD-2025-113758

Malicious code in exec-mocha-pipe-repository npm...

EUVD-2025-113753

Malicious code in exec-parcel-tailwindcss-markdown npm...

Malicious code in vega-supervisor-exec-taurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30b36eecda9d3527991832751c533eeff3acb6d01350295eb3cbc83637ae07ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...