EUVD-2025-111382

Malicious code in materialize-await-cosmiconfig-slides npm...

EUVD-2025-111797

Malicious code in less-loader-cosmiconfig-prompts-ganymede npm...

Malicious code in cosmiconfig-firebase-warp-subscription (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eee21f35eb9805d7f31c7f493c82f906f9774634ec1b223e8d3c7fafec2331c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114911

Malicious code in cosmiconfig-thuban-scripts-centaurus npm...

EUVD-2025-124797

Malicious code in mongodb-cosmiconfig-impulse-frontend npm...

Malicious code in cosmiconfig-mocha-mdx-phoebe (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89e6409a70557c88c22b300d1eef3de7cac56caeb40ddfd9f8c457ffa474cb67 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120046

Malicious code in zephyr-init-json-cosmiconfig npm...

EUVD-2025-124763

Malicious code in mongoose-javascript-cosmiconfig-mongoose npm...

EUVD-2025-121387

Malicious code in terser-ursa-cosmiconfig-json npm...

EUVD-2025-116380

Malicious code in auth-europa-json-cosmiconfig npm...

EUVD-2025-114936

Malicious code in cosmiconfig-await-cressida-inquirer npm...

EUVD-2025-114914

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint npm...

EUVD-2025-113015

Malicious code in grus-ora-cosmiconfig-cluster npm...

EUVD-2025-116171

Malicious code in bellatrix-cosmiconfig-axios-polaris npm...

Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bfc4774c2b116959c2ccab5c6bf4747b653d6400e83e7a4849c1bf7bb83e1d7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quasar-cosmiconfig-async-json (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3e76bb28548534fc01c9b0261f4267dbbec430eb9d246820b1104a172a156064 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114930

Malicious code in cosmiconfig-eleventy-nightwatch-procyon npm...

EUVD-2025-120196

Malicious code in xml-start-cosmiconfig-cypress npm...

EUVD-2025-114935

Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager npm...

MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...