EUVD-2025-121380

Malicious code in terser-webpack-plugin-eslint-config-nightmare-native npm...

EUVD-2025-115636

Malicious code in cassini-native-blitz-bunyan npm...

EUVD-2025-114619

Malicious code in deimos-comet-ganymede-native npm...

EUVD-2025-116183

Malicious code in barnard-vuetify-lyra-native npm...

MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142095 Malicious code in epimetheus-ganymede-native-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36f9e981e62d594dce3c76d2f3f1e4089d7417c37b7e7968a8afa7284894b681 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114661

Malicious code in dactyl-native-superagent-nextjs npm...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-124623

Malicious code in native-spectron-mini-css-extract-plugin-loopback npm...

EUVD-2025-123244

Malicious code in protractor-aldebaran-native-quito npm...

EUVD-2025-115888

Malicious code in bulma-jest-native-loop npm...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-122468

Malicious code in rimraf-native-wezen-karma npm...

EUVD-2025-122091

Malicious code in semantic-release-native-server-mysql npm...

Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143955 Malicious code in jovian-native-google-altair (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18c92729ce788c0306a566215970143f0eef297f78f5ca7f805ea1ab316e072 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114015

Malicious code in epimetheus-ganymede-native-superagent npm...

EUVD-2025-116746

Malicious code in altair-native-webpack-perseus npm...

EUVD-2025-124620

Malicious code in native-weywot-xenon-gatsby npm...

MAL-2025-149691 Malicious code in xenos-thuban-resolvers-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50c87583f813bf3b289010d2d1fe63c705d1c7b1a54fd57decd0f17f40b0c5d6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...