EUVD-2025-123073

Malicious code in pulsar-zenobia-sirius-callback npm...

EUVD-2025-124628

Malicious code in native-magellan-despina-callback npm...

EUVD-2025-124617

Malicious code in nconf-apollo-ursa-callback npm...

EUVD-2025-123955

Malicious code in parcel-mui-event-callback npm...

EUVD-2025-116461

Malicious code in atlas-callback-xenos-janus npm...

EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

EUVD-2025-112838

Malicious code in hercules-ceres-jest-callback npm...

EUVD-2025-121537

Malicious code in supervisor-callback-xo-gridsome npm...

EUVD-2025-124848

Malicious code in mocha-chariklo-callback-pulsar npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

Malicious code in callback-apollo-forever-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7996edf836737ab7f467291745cf1804def8903044963d1c9e7971d8f0e64cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123779

Malicious code in phoebe-callback-javascript-sequelize npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-113507

Malicious code in fornax-airbnb-callback-stream npm...

EUVD-2025-114207

Malicious code in electron-builder-gridsome-callback-aldebaran npm...

EUVD-2025-113386

Malicious code in fusion-callback-soap-markdownlint npm...

EUVD-2025-115021

Malicious code in convict-rehype-callback-npm npm...

EUVD-2025-115796

Malicious code in callback-request-server-node-config npm...