EUVD-2025-124619

Malicious code in nconf-airbnb-draco-magellan npm...

Malicious code in loglevel-zenobia-uninstall-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 572a6e5d829e59f0b8995f1f55f6789dedcf5b988c5fff328988010ab30a6e0b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120840

Malicious code in vega-draco-yaml-html-webpack-plugin npm...

EUVD-2025-115472

Malicious code in chalk-draco-wezen-canopus npm...

EUVD-2025-122867

Malicious code in react-bootstrap-draco-nuxtjs-charon npm...

EUVD-2025-114165

Malicious code in elektra-draco-kinetic-backend npm...

Malicious code in antares-cypress-cygnus-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02ab3cd2a208a97ccbfb1636b9e675b1bdb1ea44289c7dac7f3c416ef7754ad4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124174

Malicious code in oberon-io-thuban-draco npm...

Malicious code in cosmos-ora-draco-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3873112fbd1332f5a3d578153dc632d051b129da204c28ee2625b86454b1913 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114386

Malicious code in dotenv-parse-variables-gridsome-alphard-draco npm...

Malicious code in geckodriver-process-module-draco (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f0b003134420a4f6d79fd4f63c839be965746e5cf508de21a4f403624f0104e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114308

Malicious code in draco-xerxes-parcel-browserify npm...

EUVD-2025-116699

Malicious code in antares-cypress-cygnus-draco npm...

EUVD-2025-124041

Malicious code in ora-draco-phoebe-odin npm...

EUVD-2025-121986

Malicious code in sirius-chai-draco-taurus npm...

EUVD-2025-113327

Malicious code in galaxy-apollo-phoebe-draco npm...

EUVD-2025-114744

Malicious code in cygnus-draco-local-rollup-plugin npm...

EUVD-2025-115353

Malicious code in child-process-prettier-stylelint-draco-vuepress npm...

EUVD-2025-113233

Malicious code in geckodriver-process-module-draco npm...

Malicious code in achernar-draco-redis-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a6bbb2ee0d463c7b05d8868a246ea77058a8af3bcc73db7f0edd475dd843324 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...