EUVD-2025-124410

Malicious code in node-config-jasmine-sass-loader-mocha npm...

EUVD-2025-124403

Malicious code in node-config-sadr-node-sass-loglevel npm...

EUVD-2025-124401

Malicious code in node-config-terser-start-morgan npm...

EUVD-2025-124893

Malicious code in miranda-commitlint-config-angular-castor-thuban npm...

EUVD-2025-124892

Malicious code in miranda-config-odin-spectron npm...

EUVD-2025-124866

Malicious code in miranda-rehype-node-config-docusaurus npm...

EUVD-2025-113686

Malicious code in farout-sails-eslint-config-chariklo npm...

EUVD-2025-111798

Malicious code in less-loader-config-quantum-equinox npm...

EUVD-2025-115150

Malicious code in commitlint-config-angular-bulma-nextjs-aether npm...

EUVD-2025-114828

Malicious code in csrf-commitlint-config-angular-axios-lacerta npm...

EUVD-2025-114176

Malicious code in electron-virgo-izar-commitlint-config-angular npm...

EUVD-2025-113909

Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius npm...

EUVD-2025-122974

Malicious code in quasar-firebase-fornax-eslint-config npm...

EUVD-2025-121663

Malicious code in start-avior-node-config-zephyr npm...

EUVD-2025-115085

Malicious code in config-ganymede-hugo-magellan npm...

EUVD-2025-121250

Malicious code in titan-fomalhaut-node-config-quark npm...

EUVD-2025-116640

Malicious code in antd-node-config-slides-lyra npm...

Malicious code in config-commitlint-config-angular-jwt-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48bdbdc79d93ea440f525e4fd0e99adb460f2672fb88a405befb6ad65a363dcf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123372

Malicious code in process-figures-run-script-node-config npm...

Malicious code in sirius-config-npm-restart (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bf75866116c886d6513c5ffb9d715f6f54cfd7a6980ebb2a1aed4dc2c7056d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...