EUVD-2025-122208

Malicious code in scorpius-sass-loader-jekyll-upgrade npm...

EUVD-2025-112197

Malicious code in jekyll-transport-fusion-css-loader npm...

EUVD-2025-113811

Malicious code in europa-webdriver-manager-jekyll-convict npm...

EUVD-2025-122377

Malicious code in run-script-gulp-hydra-jekyll npm...

EUVD-2025-113836

Malicious code in europa-jekyll-xerxes-process npm...

EUVD-2025-112215

Malicious code in jekyll-aurora-superagent-terser-webpack-plugin npm...

EUVD-2025-115175

Malicious code in commitizen-jekyll-antares-umbra npm...

EUVD-2025-124599

Malicious code in nconf-jekyll-firebase-prettier npm...

EUVD-2025-116443

Malicious code in atlas-standard-global-jekyll npm...

EUVD-2025-124595

Malicious code in nconf-prettier-jekyll-jasmine npm...

EUVD-2025-120759

Malicious code in virgo-semantic-ui-jekyll-kaus npm...

EUVD-2025-120999

Malicious code in umbra-octans-soap-jekyll npm...

EUVD-2025-124711

Malicious code in mui-phoebe-jekyll-typeorm npm...

EUVD-2025-120265

Malicious code in xenon-umbriel-jekyll-rimraf npm...

EUVD-2025-123555

Malicious code in polaris-shelljs-jekyll-sails npm...

Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114297

Malicious code in duplex-jekyll-janus-postcss-loader npm...

MAL-2025-140776 Malicious code in chromedriver-jekyll-typeorm-colors (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f1c0cb1dbb82edbc1fe147d6a005c0a89fe28d1455f9c3b8588be5233ff4110 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141812 Malicious code in duplex-jekyll-janus-postcss-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9e5d9eef64606b70b321ce6c4a064af57dcc5d305c662934213156fc9a822c73 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142494 Malicious code in firebase-dotenv-jekyll-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7250fd1d98f38675d88943be502ddde7a74890f2a44a5886ad8996430edd8f26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...