EUVD-2025-111430

Malicious code in markdown-pdf-backend-colors-nightmare npm...

EUVD-2025-124615

Malicious code in nconf-backend-comet-phoenix npm...

EUVD-2025-116607

Malicious code in apollo-backend-callback-cordelia npm...

EUVD-2025-123215

Malicious code in proxima-backend-solis-arcturus npm...

EUVD-2025-120839

Malicious code in vega-gatsby-backend-standard npm...

EUVD-2025-111880

Malicious code in lacerta-backend-soap-eslint-config npm...

Malicious code in pegasus-backend-enif-cygnus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e142535251d34119d764a5255f77afd40a8779a049b56f1f864dcd4f0cc9c2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123903

Malicious code in pegasus-backend-event-install npm...

EUVD-2025-111991

Malicious code in karma-upgrade-backend-hermes npm...

EUVD-2025-123445

Malicious code in prettier-plugin-markdown-backend-hyperion-vortex npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-116207

Malicious code in backend-run-script-chariklo-centauri npm...

EUVD-2025-114165

Malicious code in elektra-draco-kinetic-backend npm...

EUVD-2025-121286

Malicious code in thuban-backend-install-wolf npm...

EUVD-2025-123096

Malicious code in pulsar-astro-backend-xenon npm...

EUVD-2025-111242

Malicious code in metalsmith-cluster-epimetheus-backend npm...

EUVD-2025-115948

Malicious code in buffer-cypress-auth0-backend npm...

MAL-2025-139177 Malicious code in acamar-link-backend-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa26e970661dfb370e1a1f47a2210dd68b9872f989fe6114efb9f0564cbe26f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146826 Malicious code in pulsar-astro-backend-xenon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d277a175b4a65c1eeea5e6256ad1133633eeda9595eba61ab39084720699e6c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139893 Malicious code in backend-oberon-gulp-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f226d67cb720d14461d910199eaa5027444b1d55a2845ec76a5fe3ea4ffaefdd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...