EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

EUVD-2025-123779

Malicious code in phoebe-callback-javascript-sequelize npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-113386

Malicious code in fusion-callback-soap-markdownlint npm...

Malicious code in husky-callback-algol-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1538e4a9f30831e667538f037c38b18a94ec4a408eba6eb228a4f975a9b8613c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121537

Malicious code in supervisor-callback-xo-gridsome npm...

EUVD-2025-120257

Malicious code in xenos-cypress-ursa-callback npm...

EUVD-2025-120342

Malicious code in xanadu-callback-request-bootstrap npm...

EUVD-2025-112631

Malicious code in hyperion-janus-mutation-callback npm...

EUVD-2025-122579

Malicious code in rest-command-callback-command npm...

EUVD-2025-123902

Malicious code in pegasus-callback-build-sequelize npm...

MAL-2025-149132 Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121659

Malicious code in start-build-callback-axios npm...

EUVD-2025-115785

Malicious code in callback-venus-flare-charon npm...

MAL-2025-143507 Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

MAL-2025-142605 Malicious code in fornax-airbnb-callback-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7bb38b97ebf222467227cf0d8a16a2bccbe710490976a742213e6145637fc84 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...