EUVD-2025-124781

Malicious code in mongodb-prettier-stylelint-warp-google npm...

EUVD-2025-124789

Malicious code in mongodb-grus-despina-apollo npm...

EUVD-2025-124788

Malicious code in mongodb-halley-pavo-hyperion npm...

EUVD-2025-124776

Malicious code in mongodb-vega-nova-weywot npm...

EUVD-2025-124795

Malicious code in mongodb-cz-conventional-changelog-mensa-cors npm...

MAL-2025-145127 Malicious code in mongodb-europa-apollo-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12965135fe97f0da1766cf10100ab1dbc12895842d4ebf6a356314385cebe313 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114958

Malicious code in corvus-elektra-meteor-mongodb npm...

Malicious code in mongodb-ci (npm)

The package mongodb-ci was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9b911aab71cd920347a53724f3e83adcf499a82d3c5ae4a096bd972282ef97b Any computer that has this package installed or running should be considered fully compromise...

MAL-2025-26637 Malicious code in mongodb-cressida-public-oberon (npm)

The package mongodb-cressida-public-oberon was found to contain malicious code...