EUVD-2025-115132

Malicious code in commitlint-csv-auth-oberon npm...

EUVD-2025-122215

Malicious code in scorpius-deimos-hugo-csv npm...

EUVD-2025-113933

Malicious code in eris-miranda-csv-halley npm...

EUVD-2025-112931

Malicious code in hapi-csv-zenobia-xanadu npm...

EUVD-2025-123328

Malicious code in procyon-hapi-csv-flare npm...

MAL-2025-142584 Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114764

Malicious code in csv-kastra-install-winston npm...

EUVD-2025-115722

Malicious code in capella-css-minimizer-webpack-plugin-csv-meteor npm...

EUVD-2025-122800

Malicious code in registry-csv-corvus-mocha npm...

EUVD-2025-114761

Malicious code in csv-nashira-scorpius-indus npm...

Malicious code in xo-hermes-csv-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ac54c4f56f565c7cc1577845904c3da765754c0aef53b6fda637b70bad32dd2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114404

Malicious code in dotenv-csv-jekyll-soap npm...

EUVD-2025-111514

Malicious code in lynx-yildun-csv-xenon npm...

EUVD-2025-111507

Malicious code in lyra-grus-csv-dotenv-parse-variables npm...

EUVD-2025-114757

Malicious code in csv-ora-relay-canopus npm...

EUVD-2025-114755

Malicious code in csv-pulsar-hexo-bunyan npm...

EUVD-2025-124756

Malicious code in mongoose-pavo-arcturus-csv npm...

EUVD-2025-120920

Malicious code in upgrade-csv-gulp-browserify npm...

MAL-2025-140976 Malicious code in commitlint-csv-auth-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38ec831b063c5df584e2cbbebb9f222f1a0f88cf465297439c89873f5634853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142215 Malicious code in eslint-csv-galaxy-protractor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd45e16c796e796ce2867f6edaf3c1ecb8afd063eb8315db7cf688fcfe950107 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...