MAL-2025-187575 Malicious code in janus-mysql-delphinus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e647b81dbfd5ee7655c95b369e7c6378d99b0066cc26cbd55fee232abdd2e521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-180406

Malicious code in antimatter-exoplanetology-convict-update npm...

EUVD-2025-178307

Malicious code in janus-mysql-delphinus-convict npm...

EUVD-2025-179245

Malicious code in draco-convict-carina-superagent npm...

EUVD-2025-179587

Malicious code in convict-axios-cosmogenic-miranda npm...

EUVD-2025-175444

Malicious code in yildun-cors-convict-ursa npm...

EUVD-2025-179580

Malicious code in convict-writable-webpack-cosmogenic npm...

EUVD-2025-176930

Malicious code in publish-alphard-convict-halley npm...

EUVD-2025-177797

Malicious code in miranda-stream-resolvers-convict npm...

EUVD-2025-179583

Malicious code in convict-spawn-gravitationalwave-stream npm...

EUVD-2025-179490

Malicious code in cryonics-convict-tectonophysics-interstellarmedium npm...

EUVD-2025-178066

Malicious code in lint-staged-reveal-md-electron-convict npm...

MAL-2025-186295 Malicious code in convict-axios-cosmogenic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699479996c8d027d40da1208f7afdeaf9a940ada10a45ce700f370a485dd9203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178162

Malicious code in lacerta-paleobotany-convict-babel npm...

EUVD-2025-177772

Malicious code in mongoose-convict-kaus-thermochronology npm...

Malicious code in equinox-sedna-sequelize-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 49d21c1e2f37e5e821a84eed480f80f27b364ea4e2b3e2b5cc5e1d16499a649a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179584

Malicious code in convict-quantum-hermes-enif npm...

EUVD-2025-179582

Malicious code in convict-thuban-blackhole-chromedriver npm...

EUVD-2025-177113

Malicious code in polaris-interferometry-sails-convict npm...

EUVD-2025-178498

Malicious code in hugo-mini-css-extract-plugin-ophiuchus-convict npm...