EUVD-2025-116307

Malicious code in await-css-loader-neptune-cosmiconfig npm...

EUVD-2025-111382

Malicious code in materialize-await-cosmiconfig-slides npm...

EUVD-2025-114935

Malicious code in cosmiconfig-barnard-markdown-pdf-webdriver-manager npm...

EUVD-2025-121701

Malicious code in sqlite-cosmiconfig-passport-library npm...

EUVD-2025-123246

Malicious code in prompts-wasat-charon-cosmiconfig npm...

EUVD-2025-116091

Malicious code in betelgeuse-transport-cosmiconfig-sails npm...

Malicious code in cosmiconfig-await-cressida-inquirer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bd2568a507aef1951ff5eedd43bdd5b0ec74acef3c09457d804ff29fed8d97e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116588

Malicious code in apollo-halley-cosmiconfig-cypress npm...

EUVD-2025-124485

Malicious code in nightmare-event-blitz-cosmiconfig npm...

EUVD-2025-122410

Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver npm...

EUVD-2025-111486

Malicious code in magellan-cosmiconfig-postgres-webdriver-manager npm...

EUVD-2025-114911

Malicious code in cosmiconfig-thuban-scripts-centaurus npm...

Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122011

Malicious code in shelljs-europa-cosmiconfig-concurrently npm...

EUVD-2025-114914

Malicious code in cosmiconfig-release-it-betelgeuse-commitlint npm...

EUVD-2025-115456

Malicious code in chalk-orbit-dynamo-cosmiconfig npm...

MAL-2025-141189 Malicious code in cosmiconfig-mongoose-nuxtjs-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe186353e91bca7c86ea450985eea3716d9b31f8f7cdbbb52226081c9bf0e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142243 Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e8afdb64b20c818f81c4e664f57f0d63604e0f039189a3fb71f2106206e9cf5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148224 Malicious code in sqlite-cosmiconfig-passport-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fac3c4fb6f1851d954cfaae38164bfeb87249be82f97d7e6ba1552473a461f00 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141191 Malicious code in cosmiconfig-nextjs-tailwindcss-polaris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6cb61a59a4c5387bf62fb5b1b0c1e546a26f65fc5263ca200c39bad00b2c76c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...