EUVD-2025-121722

Malicious code in spinner-morgan-equinox-wolf npm...

EUVD-2025-120812

Malicious code in venus-orbit-husky-morgan npm...

EUVD-2025-124742

Malicious code in morgan-gravity-lint-altair npm...

EUVD-2025-124748

Malicious code in morgan-browserify-install-cygnus npm...

EUVD-2025-114559

Malicious code in deneb-morgan-mongodb-publish npm...

EUVD-2025-124739

Malicious code in morgan-leda-nashira-dione npm...

EUVD-2025-115856

Malicious code in bunyan-morgan-gatsby-prompts npm...

EUVD-2025-124741

Malicious code in morgan-hyperion-hyperion-gatsby npm...

Malicious code in mutation-puppeteer-dactyl-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5573cde9eb7f58c50db9c8a3d2f003010d9e86a0331f9e8cc3f75dd851d1b6d5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sqlite-stop-blitz-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b8827208887d475e0e416b194ba336bf49e238e51cccf1d36e5c344c213c13b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112407

Malicious code in io-sagitta-morgan-nightwatch npm...

EUVD-2025-123087

Malicious code in pulsar-jwt-warp-morgan npm...

EUVD-2025-111606

Malicious code in loglevel-impulse-taurus-morgan npm...

EUVD-2025-124749

Malicious code in morgan-betelgeuse-development-indus npm...

EUVD-2025-116076

Malicious code in blaze-morgan-phoenix-scorpius npm...

EUVD-2025-121480

Malicious code in tailwindcss-morgan-xenon-prettier-plugin-markdown npm...

EUVD-2025-113199

Malicious code in gemini-publish-gacrux-morgan npm...

EUVD-2025-123878

Malicious code in pegasus-morgan-polaris-cordelia npm...

EUVD-2025-124726

Malicious code in morgan-xo-colors-hercules npm...

MAL-2025-143706 Malicious code in io-sagitta-morgan-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086f999fc627768d00c1afc5e47ec5cdc6e8a75d0c75e284604f764d0763d384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...