EUVD-2025-120423

Malicious code in winston-magellan-miranda-terser-webpack-plugin npm...

EUVD-2025-113983

Malicious code in equinox-miranda-achernar-xo npm...

EUVD-2025-113956

Malicious code in eridanus-registry-nightmare-miranda npm...

EUVD-2025-116843

Malicious code in airbnb-node-sass-kastra-miranda npm...

EUVD-2025-121529

Malicious code in supervisor-miranda-despina-supervisor npm...

EUVD-2025-113474

Malicious code in fornax-miranda-dotenv-parse-variables-proxima npm...

EUVD-2025-124891

Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora npm...

EUVD-2025-122253

Malicious code in sass-loader-gravity-draco-miranda npm...

EUVD-2025-123127

Malicious code in publish-miranda-hugo-hermes npm...

EUVD-2025-121372

Malicious code in terser-webpack-plugin-miranda-scripts-less-loader npm...

EUVD-2025-120733

Malicious code in vuepress-miranda-restart-cypress npm...

EUVD-2025-124864

Malicious code in miranda-resolvers-pyxis-iota npm...

EUVD-2025-123099

Malicious code in publish-writable-remark-miranda npm...

Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115936

Malicious code in buffer-phenomic-miranda-taurus npm...

EUVD-2025-122185

Malicious code in scripts-miranda-nconf-apollo npm...

EUVD-2025-121035

Malicious code in ultra-exec-event-miranda npm...

EUVD-2025-124866

Malicious code in miranda-rehype-node-config-docusaurus npm...

EUVD-2025-123412

Malicious code in prettier-stylelint-miranda-rollup-plugin-csv npm...

MAL-2025-144770 Malicious code in mdx-miranda-apollo-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45e7684b2c1caccbc41129dd131debd88ef627e42a25ac781346f8d69986211f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...