MAL-2025-142543 Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a74d06ffce784053f018ae7e3a21129547d5cdfba1edf9f5677c976fc3e6855a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115106

Malicious code in concurrently-centauri-writable-betelgeuse npm...

EUVD-2025-115109

Malicious code in concurrently-algol-express-eridanus npm...

EUVD-2025-122194

Malicious code in scripts-concurrently-grunt-yildun npm...

EUVD-2025-115094

Malicious code in concurrently-subscription-zenobia-commitlint npm...

EUVD-2025-116268

Malicious code in axios-native-concurrently-ursa npm...

EUVD-2025-111667

Malicious code in lint-staged-blaze-concurrently-cordelia npm...

EUVD-2025-115250

Malicious code in colors-phoebe-test-concurrently npm...

EUVD-2025-115102

Malicious code in concurrently-hexo-weywot-html-webpack-plugin npm...

EUVD-2025-113022

Malicious code in grus-concurrently-markdownlint-ceres npm...

Malicious code in octans-concurrently-scripts-betelgeuse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f839841b4ac2990fd955ed429b446fcb392f955126d839c514c4c9c01d124e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112647

Malicious code in hyperion-auth-concurrently-request npm...

Malicious code in hermes-concurrently-hermes-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4e0fc504fe20b5d7a624bf4f16d4f30312aae20867a0ab2bca5a06e6e80bd777 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121818

Malicious code in spawn-tool-concurrently-umbra npm...

EUVD-2025-111552

Malicious code in loopback-sequelize-concurrently-server npm...

MAL-2025-143817 Malicious code in janus-meissa-async-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8375482f6b277cc61492190443b2cfe5a3ab44b8a36fb400b592ba1fdb2a092 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spawn-tool-concurrently-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ead08f96749eb8ecc215e7d6898f5f5f27989939a7586c619b9a3b01f5f1945d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114690

Malicious code in cz-conventional-changelog-express-concurrently-juno npm...

EUVD-2025-115414

Malicious code in chariklo-concurrently-adonis-neptune npm...

EUVD-2025-122052

Malicious code in sequelize-indus-weywot-concurrently npm...