EUVD-2025-113730

Malicious code in express-janus-auth-publish npm...

EUVD-2025-123277

Malicious code in promise-nuxtjs-umbra-express npm...

EUVD-2025-113740

Malicious code in express-cassini-warp-soap npm...

EUVD-2025-113739

Malicious code in express-delphinus-odin-phoenix npm...

Malicious code in heka-express-axios-eslint-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d33e9feb5948da23cbdf036738822ea99bdbb64939a1ec88089a7d78643a419d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111307

Malicious code in meissa-hugo-express-uninstall npm...

EUVD-2025-113716

Malicious code in express-venus-sails-phoebe npm...

EUVD-2025-115052

Malicious code in configstore-magellan-express-hermes npm...

MAL-2025-142375 Malicious code in express-eris-jabbah-eslint-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68261a9da999cc9d67533680cbe96564c0b0a0adf9718cc791d010c9f8d58f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147341 Malicious code in rest-centauri-remark-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b573d9617518f401b9dcd80de8a1e012c0834c265b4e9e7a20411833b2661a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sagitta-express-reveal-md-orbit (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ec668e95fec75e52b44abe1d7cdc557d71c98e8c073a395a85f274895955b865 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122703

Malicious code in release-it-command-express-pyxis npm...

Malicious code in sagitta-sirius-express-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f087754848ecd4b5049a7ae0f8fba20fb2b743ebb27991b80416ff6cea727a76 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120621

Malicious code in webdriver-manager-altair-chromedriver-express npm...

EUVD-2025-122304

Malicious code in sagitta-sirius-express-async npm...

EUVD-2025-123836

Malicious code in perseus-express-playwright-module npm...

EUVD-2025-123666

Malicious code in pino-venus-markdownlint-express npm...

EUVD-2025-123653

Malicious code in pipe-rehype-browserify-express npm...

EUVD-2025-123535

Malicious code in postcss-deimos-express-fusion npm...

EUVD-2025-123391

Malicious code in private-eris-express-parcel npm...