EUVD-2025-113653

Malicious code in fetch-start-carpo-pino npm...

EUVD-2025-113652

Malicious code in fetch-supervisor-phoenix-octans npm...

EUVD-2025-113651

Malicious code in fetch-virgo-nashira-adonis npm...

EUVD-2025-113650

Malicious code in fetch-virgo-pegasus-phoenix npm...

EUVD-2025-114760

Malicious code in csv-neptune-fetch-meteor npm...

EUVD-2025-114456

Malicious code in dione-warp-fetch-wasat npm...

EUVD-2025-114402

Malicious code in dotenv-enif-carina-fetch npm...

EUVD-2025-114326

Malicious code in dotenv-safe-zenith-configstore-fetch npm...

EUVD-2025-114201

Malicious code in electron-builder-nconf-warp-fetch npm...

EUVD-2025-114060

Malicious code in enif-gatsby-fetch-lacerta npm...

EUVD-2025-115623

Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin npm...

EUVD-2025-116499

Malicious code in astro-fetch-orbit-celeste npm...

EUVD-2025-116236

Malicious code in babel-kronos-xenon-fetch npm...

EUVD-2025-116218

Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch npm...

EUVD-2025-116826

Malicious code in aldebaran-fetch-node-sass-koa npm...

EUVD-2025-116778

Malicious code in alphard-fetch-corvus-command npm...

Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142443 Malicious code in fetch-event-cosmiconfig-chalk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 553b1de624bc1c101df86ed334fbb6c5575ad72d38d45302ba2c4709aff2df39 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149811 Malicious code in yildun-configstore-fetch-iota (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d5eac125c5295ecf1ed43a32e19f2d93399172cfdf55b8347ed06ee886b967b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144876 Malicious code in metalsmith-elektra-fetch-event (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70ad4825d26657e1d808e320ba35d6115608876599dc6bf3bba69bae9ba3c742 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...