EUVD-2025-115048

Malicious code in configstore-publish-callback-atlas npm...

EUVD-2025-121673

Malicious code in standard-cressida-callback-hexo npm...

EUVD-2025-115789

Malicious code in callback-shelljs-antares-pavo npm...

EUVD-2025-121364

Malicious code in test-callback-airbnb-wasat npm...

EUVD-2025-124562

Malicious code in neptune-eridanus-dynamo-callback npm...

EUVD-2025-114445

Malicious code in docusaurus-eslint-config-telesto-callback npm...

EUVD-2025-115788

Malicious code in callback-spica-rollup-schema npm...

EUVD-2025-115784

Malicious code in callback-webdriver-mocha-apex-fusion npm...

EUVD-2025-115810

Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...

EUVD-2025-121264

Malicious code in thuban-run-script-callback-meteor npm...

Malicious code in parcel-mui-event-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf3a8fdcd7a231752e40c7d558b2efeafc603d9ec4bee1ff23f8c5ec2d88e5df This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115801

Malicious code in callback-private-hermes-resolvers npm...

Malicious code in convict-rehype-callback-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b999f9586825e4391195c2113eb87bcb2652d51fac4d2e786258b93821d60d31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115805

Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown npm...

EUVD-2025-120497

Malicious code in weywot-callback-native-standard npm...

EUVD-2025-116225

Malicious code in backend-andromeda-chakra-ui-callback npm...

Malicious code in pegasus-callback-build-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa451bc61732e3800480939f0e2c59aacea12ed0549347ad33424411dbe39b55 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in meteor-foundation-callback-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5158cc65ad87381b4a564c458d959004d7496c8d9fb16a7a1070b0685ea9fef8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115792

Malicious code in callback-run-script-html-webpack-plugin-server npm...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...