EUVD-2025-123719

Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll npm...

EUVD-2025-124628

Malicious code in native-magellan-despina-callback npm...

EUVD-2025-124622

Malicious code in native-terser-polaris-xml npm...

EUVD-2025-124623

Malicious code in native-spectron-mini-css-extract-plugin-loopback npm...

EUVD-2025-124621

Malicious code in native-venus-kastra-pino npm...

EUVD-2025-124620

Malicious code in native-weywot-xenon-gatsby npm...

EUVD-2025-112854

Malicious code in helmet-native-quito-capella npm...

EUVD-2025-114015

Malicious code in epimetheus-ganymede-native-superagent npm...

EUVD-2025-115814

Malicious code in callback-adonis-native-ophiuchus npm...

EUVD-2025-116620

Malicious code in apex-native-html-webpack-plugin-betelgeuse npm...

EUVD-2025-116473

Malicious code in async-native-vortex-lynx npm...

EUVD-2025-121114

Malicious code in triton-duplex-jsonp-native npm...

EUVD-2025-120497

Malicious code in weywot-callback-native-standard npm...

EUVD-2025-122854

Malicious code in react-bootstrap-native-rehype-style-loader npm...

EUVD-2025-111186

Malicious code in meteor-readable-norma-native npm...

EUVD-2025-112219

Malicious code in javascript-umbriel-kronos-native npm...

Malicious code in cygnus-rollup-package-native (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa6d1dd179df2d4f0340eb8e34236ab83acaacdfc2bf36ffeddecd60c721af8f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in native-magellan-despina-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ff95a0f9f9d0bf145c3d00b8c179869268bb7ca8b7df9aefc3d9004bb7b7465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...