EUVD-2025-177492

Malicious code in octans-non-blocking-repository-cosmiconfig npm...

EUVD-2025-175522

Malicious code in xanthus-cosmiconfig-nightwatch-eridanus npm...

EUVD-2025-178389

Malicious code in inquirer-winston-commitlint-cosmiconfig npm...

EUVD-2025-176412

Malicious code in server-nebula-cosmiconfig-umbra npm...

EUVD-2025-179678

Malicious code in colors-gravity-cosmiconfig-zephyr npm...

EUVD-2025-178309

Malicious code in janus-greatfilter-cosmiconfig-ursa npm...

EUVD-2025-175430

Malicious code in zenith-cosmiconfig-miranda-standard npm...

Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678fcb16a0b7adb4817edb4b06bec8c2c550bf2f68a2e83f948eed4985d886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187493 Malicious code in inquirer-winston-commitlint-cosmiconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8d8803b934bddaa10af678e2f1095520a0c5df75893b63ef2fb45b3564318c6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186330 Malicious code in cosmiconfig-gatsby-janus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186619 Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9e2cf5e995e7be6217368c91ec8ecf853022838cc7a763cbcc73d49e0c23b00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186331 Malicious code in cosmiconfig-perseus-redgiant-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8cabf74a61f50af9ee6fb8098d25d2c08526d5b73a3c74ec59e714ad4cb37b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188294 Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186328 Malicious code in cosmiconfig-deimos-kaus-hyperion (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b417397ddce4e37930565b0788e7a53a679b19a15884a94a966067146ae2b85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123709

Malicious code in pino-cosmiconfig-eris-perseus npm...

EUVD-2025-124485

Malicious code in nightmare-event-blitz-cosmiconfig npm...

EUVD-2025-123095

Malicious code in pulsar-despina-apollo-cosmiconfig npm...

EUVD-2025-120046

Malicious code in zephyr-init-json-cosmiconfig npm...

EUVD-2025-114927

Malicious code in cosmiconfig-gemini-wolf-publish npm...

EUVD-2025-114919

Malicious code in cosmiconfig-neptune-public-luna npm...