EUVD-2025-116226

Malicious code in babel-xml-config-hyperion npm...

EUVD-2025-124409

Malicious code in node-config-juno-install-iota npm...

EUVD-2025-123131

Malicious code in publish-karma-ora-node-config npm...

EUVD-2025-124413

Malicious code in node-config-gatsby-terser-antares npm...

EUVD-2025-113917

Malicious code in eslint-config-bootstrap-cosmos-eclipse npm...

EUVD-2025-116506

Malicious code in ariel-spawn-commitlint-config-angular-cressida npm...

EUVD-2025-124415

Malicious code in node-config-envconfig-eleventy-neptune npm...

EUVD-2025-113783

Malicious code in event-supervisor-eslint-config-tethys npm...

EUVD-2025-113686

Malicious code in farout-sails-eslint-config-chariklo npm...

Malicious code in deimos-gatsby-config-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11e0ef6b20e01abb0c888a4ffa0a1c801db4dc89a89b1840fa59da4f1345f654 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124747

Malicious code in morgan-commitlint-config-angular-repository-dynamo npm...

EUVD-2025-121721

Malicious code in spinner-node-config-sync-grus npm...

EUVD-2025-114799

Malicious code in css-loader-phenomic-phoebe-node-config npm...

EUVD-2025-113684

Malicious code in farout-sync-regulus-node-config npm...

EUVD-2025-114115

Malicious code in eleventy-dotenv-node-config-restart npm...

EUVD-2025-112897

Malicious code in heka-quito-pipe-eslint-config npm...

EUVD-2025-120155

Malicious code in yakutsk-postgres-tool-node-config npm...

EUVD-2025-114240

Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager npm...

Malicious code in csrf-pulsar-config-centaurus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6165b6024805b3adc5e2199016ba077ca2901335befbde30b4f24903628994 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6402077653de7905967491c9e1aa4a9a1662661767e24f36434c2d419174f1b7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...