EUVD-2025-112849

Malicious code in helmet-slidev-bellatrix-babel npm...

EUVD-2025-116227

Malicious code in babel-xanadu-nconf-nashira npm...

EUVD-2025-115258

Malicious code in colors-figures-hermes-babel npm...

EUVD-2025-116255

Malicious code in babel-bellatrix-lint-staged-json npm...

EUVD-2025-122453

Malicious code in rocket-jasmine-babel-scorpius npm...

EUVD-2025-116258

Malicious code in babel-atlas-cordelia-nashira npm...

EUVD-2025-121571

Malicious code in subscription-europa-babel-browserify npm...

EUVD-2025-116234

Malicious code in babel-pegasus-xml-schema npm...

EUVD-2025-114688

Malicious code in cz-conventional-changelog-json-postcss-babel npm...

EUVD-2025-116244

Malicious code in babel-equinox-global-xanthus npm...

Malicious code in babel-equinox-global-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3eed002cb4c6101e4579e5c8032d6d32f9aba22e6cfc575876aae0c7cbb1bd2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in prettier-ini-babel-mdx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36b566f92ee775fdadbe70403772b8454710e9712622c79844d941ad37fd3875 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114981

Malicious code in cors-levels-babel-scripts npm...

EUVD-2025-122433

Malicious code in rollup-babel-jabbah-wolf npm...

EUVD-2025-112313

Malicious code in janus-babel-reveal-md-antares npm...

MAL-2025-140850 Malicious code in colors-figures-hermes-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb0d461a39e2a3c5b55bbcc5d75fcf61a6d0ccbbbd2705f05c448b7037bfc03 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145724 Malicious code in oauth-browserify-nuxtjs-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5f5f36e92b9e388038dd52f095f33e5f184db559d0a98ce9f59c3707186d3f6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147030 Malicious code in rate-limiter-babel-package-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f7c012dab347c3e3e7f352b84d6995cf56ed90b0ff646e3e3fcdaa6e351c7310 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139863 Malicious code in babel-iota-command-bootes (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4053b964c04b56158ec8a42e3d4cdfcdd483167161fd27455c1a449b7b31160 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145304 Malicious code in nconf-babel-leda-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd58af62c423f22dc1dd348dd58260892dca5d44f791cf0bdced57cc4e3d30c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...