EUVD-2025-124024

Malicious code in ora-sagitta-callback-markdown-pdf npm...

EUVD-2025-122261

Malicious code in sass-loader-callback-oauth-sagitta npm...

EUVD-2025-120342

Malicious code in xanadu-callback-request-bootstrap npm...

EUVD-2025-124562

Malicious code in neptune-eridanus-dynamo-callback npm...

EUVD-2025-115799

Malicious code in callback-process-upgrade-auth npm...

EUVD-2025-115808

Malicious code in callback-centauri-enif-zephyr npm...

EUVD-2025-115804

Malicious code in callback-ora-perseus-sadr npm...

EUVD-2025-114515

Malicious code in despina-event-callback-arcturus npm...

EUVD-2025-114445

Malicious code in docusaurus-eslint-config-telesto-callback npm...

EUVD-2025-124289

Malicious code in non-blocking-xml-procyon-callback npm...

EUVD-2025-124628

Malicious code in native-magellan-despina-callback npm...

EUVD-2025-115800

Malicious code in callback-private-tool-dotenv-safe npm...

EUVD-2025-115790

Malicious code in callback-semantic-ui-pulsar-telesto npm...

EUVD-2025-112701

Malicious code in husky-callback-algol-sirius npm...

EUVD-2025-122586

Malicious code in resolvers-sedna-callback-vuepress npm...

Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115813

Malicious code in callback-antd-transport-install npm...

EUVD-2025-115788

Malicious code in callback-spica-rollup-schema npm...

MAL-2025-140298 Malicious code in callback-centauri-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a679174385d73c39620a1a37cbb39b69e452416d7479c489f935ba04496cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in husky-callback-algol-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...