Malicious code in protractor-aldebaran-native-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ec0d5cc0e40ec412b1d438650ad8c4376000d846c37ff0e84f10ed2b00b6ea2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124624

Malicious code in native-quito-venus-semantic-release npm...

EUVD-2025-115941

Malicious code in buffer-nodejs-native-grunt npm...

EUVD-2025-111181

Malicious code in meteor-sedna-markdownlint-native npm...

EUVD-2025-116183

Malicious code in barnard-vuetify-lyra-native npm...

EUVD-2025-123244

Malicious code in protractor-aldebaran-native-quito npm...

EUVD-2025-122541

Malicious code in restart-event-achernar-native npm...

EUVD-2025-124630

Malicious code in native-enif-redis-redis npm...

Malicious code in cassini-native-blitz-bunyan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57e9c1ddd23dbb7b4ae51e472bf7ef3b30980708e67a3f5144acea3514052e2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123932

Malicious code in pavo-altair-native-achernar npm...

EUVD-2025-121226

Malicious code in toml-chalk-restart-native npm...

EUVD-2025-114661

Malicious code in dactyl-native-superagent-nextjs npm...

Malicious code in library-zenobia-native-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce9620d5a9059a59c24af888f0c640dcbdd31ad3e5c571b59e3b1c48a9264c8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120412

Malicious code in winston-ophiuchus-native-parcel npm...

EUVD-2025-111720

Malicious code in library-zenobia-native-cache npm...

MAL-2025-147068 Malicious code in react-bootstrap-native-rehype-style-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c731557ff748c3b450e7f9a142a04f4182d48cb705f4ec926d465475eb2b7a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124626

Malicious code in native-phoenix-antares-publish npm...

EUVD-2025-124625

Malicious code in native-puppeteer-sagitta-cosmiconfig npm...

EUVD-2025-121634

Malicious code in stop-colors-native-sedna npm...

EUVD-2025-123892

Malicious code in pegasus-ganymede-native-taurus npm...