EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

EUVD-2025-122807

Malicious code in redis-sqlite-odin-cosmiconfig npm...

EUVD-2025-114925

Malicious code in cosmiconfig-hexo-blitz-tethys npm...

EUVD-2025-114919

Malicious code in cosmiconfig-neptune-public-luna npm...

EUVD-2025-123709

Malicious code in pino-cosmiconfig-eris-perseus npm...

EUVD-2025-124485

Malicious code in nightmare-event-blitz-cosmiconfig npm...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-114931

Malicious code in cosmiconfig-dagda-spectron-commitizen npm...

EUVD-2025-124461

Malicious code in nightwatch-cosmiconfig-semantic-ui-development npm...

EUVD-2025-114929

Malicious code in cosmiconfig-firebase-warp-subscription npm...

EUVD-2025-116527

Malicious code in arcturus-proxima-cosmiconfig-websockets npm...

Malicious code in cosmiconfig-convict-despina-nuxtjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4641d82903a6b267b849579cbabf0ddeba17d40fa468be2cceeadf773543f2d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 224f85680e32fc803514afae57e3a670a44ee9ab4255bf6e374c5326949375d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112142

Malicious code in json-docusaurus-cosmiconfig-deimos npm...

EUVD-2025-114930

Malicious code in cosmiconfig-eleventy-nightwatch-procyon npm...

Malicious code in halley-cosmiconfig-nodejs-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06dade96fb0e2431b0716ce1e1641fac7e05a2a2cad951c5e33772fc3cec2128 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123227

Malicious code in protractor-pm2-cosmiconfig-dorado npm...

EUVD-2025-123364

Malicious code in process-mysql-cosmiconfig-npm npm...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...