EUVD-2025-176010

Malicious code in terser-isostasy-build-avior npm...

EUVD-2025-179982

Malicious code in boson-build-tachyon-solis npm...

EUVD-2025-123494

Malicious code in postcss-yaml-lynx-build npm...

EUVD-2025-115908

Malicious code in build-ursa-hugo-pulsar npm...

EUVD-2025-121512

Malicious code in sync-build-koa-miranda npm...

EUVD-2025-123108

Malicious code in publish-sirius-phoebe-build npm...

EUVD-2025-123970

Malicious code in parcel-build-castor-prompts npm...

EUVD-2025-120506

Malicious code in websockets-odin-build-pipe npm...

EUVD-2025-122279

Malicious code in sails-delphinus-build-react-bootstrap npm...

EUVD-2025-121120

Malicious code in triton-build-cli-react-bootstrap npm...

EUVD-2025-113345

Malicious code in gacrux-google-build-convict npm...

EUVD-2025-113424

Malicious code in framework-nuxtjs-sedna-build npm...

MAL-2025-149643 Malicious code in xenon-build-server-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4772e14eeb46c3faf97d734c19bfc2fa8e6f5721f73eca8f42663e11d1fd880 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114768

Malicious code in csv-build-rigel-superagent npm...

EUVD-2025-113220

Malicious code in gemini-build-regulus-airbnb npm...

Malicious code in build-quantum-alphard-figures (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b512dcd27a64dd3be41f57177a7e040aaf99d4c6408e9f96c1f7d5c9b3ff8fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123902

Malicious code in pegasus-callback-build-sequelize npm...

EUVD-2025-121659

Malicious code in start-build-callback-axios npm...

EUVD-2025-113413

Malicious code in frontend-build-css-loader-europa npm...

MAL-2025-142688 Malicious code in framework-nuxtjs-sedna-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f5259e841b741ad81487bbaa050e3336e687c0db66022001ceb0831d8feb00c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...