EUVD-2025-123887

Malicious code in pegasus-helios-bootstrap-meissa npm...

EUVD-2025-123856

Malicious code in perseus-adonis-bootstrap-exec npm...

EUVD-2025-123728

Malicious code in phoenix-cypress-bootstrap-webdriverio npm...

EUVD-2025-123607

Malicious code in pm2-sync-convict-react-bootstrap npm...

EUVD-2025-123474

Malicious code in postgres-sails-jekyll-react-bootstrap npm...

EUVD-2025-123385

Malicious code in private-ora-react-bootstrap-library npm...

EUVD-2025-123220

Malicious code in protractor-webdriver-mocha-bootstrap-venus npm...

EUVD-2025-124733

Malicious code in morgan-npm-json-react-bootstrap npm...

EUVD-2025-124697

Malicious code in mutation-fork-module-bootstrap npm...

EUVD-2025-124664

Malicious code in mysql-meissa-react-bootstrap-dagda npm...

EUVD-2025-124496

Malicious code in nextjs-react-bootstrap-dependencies-nova npm...

EUVD-2025-124437

Malicious code in nightwatch-sagitta-react-bootstrap-xanadu npm...

EUVD-2025-124287

Malicious code in norma-antares-react-bootstrap-weywot npm...

EUVD-2025-124274

Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv npm...

EUVD-2025-124180

Malicious code in oberon-apex-react-bootstrap-json npm...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-124027

Malicious code in ora-react-bootstrap-development-cressida npm...

MAL-2025-149589 Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122869

Malicious code in react-bootstrap-bootstrap-fusion-buffer npm...

MAL-2025-147050 Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47c1b7077ae1d503d6fa1608613dae97013280d40f52920ea01fd87b77227ec8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...