EUVD-2025-112477

Malicious code in init-xenos-forever-grus npm...

EUVD-2025-111736

Malicious code in library-init-flare-pm2 npm...

EUVD-2025-115620

Malicious code in castor-leda-init-colors npm...

EUVD-2025-121029

Malicious code in ultra-init-spectron-package npm...

EUVD-2025-124367

Malicious code in node-sass-sequelize-init-grunt npm...

EUVD-2025-112495

Malicious code in init-development-barnard-telesto npm...

EUVD-2025-122672

Malicious code in remark-magellan-init-envconfig npm...

EUVD-2025-116241

Malicious code in babel-init-element-ui-nebula npm...

EUVD-2025-114179

Malicious code in electron-sadr-quasar-init npm...

EUVD-2025-123068

Malicious code in puppeteer-init-eclipse-quantum npm...

EUVD-2025-114163

Malicious code in elektra-init-protractor-ursa npm...

EUVD-2025-113638

Malicious code in figures-middleware-centaurus-init npm...

EUVD-2025-121706

Malicious code in sqlite-ariel-init-lacerta npm...

EUVD-2025-122193

Malicious code in scripts-equinox-achernar-init npm...

EUVD-2025-112890

Malicious code in heka-webpack-init-prompts npm...

Malicious code in init-arcturus-native-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c3da5ab242a8037c19793e514c5febcb50bd0be61014c037b5af9be423c980fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115256

Malicious code in colors-init-slides-vortex npm...

Malicious code in morgan-init-auth0-rollup (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c1f7b65df5a3817d7d4aac2c24f406242e5012e4e015ce3e0b482c989f3fbb7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in carpo-init-stop-terser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5641579cbb1411c260c4a54abdf90d3def958523a27947118360caa005c2f5dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puppeteer-init-eclipse-quantum (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e2418e40c239a3fba75ffa4648edf93cf9cd268bb4849448363e5022edb4c61 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...