EUVD-2025-112626

Malicious code in hyperion-markdown-process-nextjs npm...

EUVD-2025-121897

Malicious code in soap-nextjs-init-tool npm...

EUVD-2025-114810

Malicious code in csrf-winston-koa-nextjs npm...

Malicious code in nextjs-procyon-postcss-chai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5e01c23ae81811c86732763e0d2d2158dde05a07a044c0da8c5f141775f2224 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142467 Malicious code in figures-fusion-nextjs-auth0 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b1463c83e9442351390e432473567d37b69c6d7f58d11c80760ebca55e7323f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146417 Malicious code in postcss-neptune-ursa-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cb77aec177aa08941fff2e38a90f659895d77f4a2d68453f8a9c1bf244d1376 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124499

Malicious code in nextjs-postcss-galaxy-triton npm...

Malicious code in rollup-plugin-changelog-oberon-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dd7587ffdb4cf843ecc0d5d44895d41406018eb6be3d4fa04943f6d13f0b1684 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148463 Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113162

Malicious code in global-tethys-nextjs-iota npm...

EUVD-2025-122217

Malicious code in scorpius-chariklo-nextjs-nodemon npm...

EUVD-2025-121755

Malicious code in spica-nextjs-draco-despina npm...

EUVD-2025-124500

Malicious code in nextjs-phoebe-commitizen-dagda npm...

EUVD-2025-113935

Malicious code in eris-hermes-nextjs-spinner npm...

Malicious code in nextjs-dorado-postgres-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4dfecd304fb29e3151b62547d5f3fb6dca1cf7d3e850787cf00409d38af9b09d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-124502

Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify npm...

EUVD-2025-122693

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...

EUVD-2025-124507

Malicious code in nextjs-dynamo-gemini-version npm...

Malicious code in zenobia-nextjs-despina-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c39b2b8df8c767b81fc7ef59247aa5eb4ec4ed8f9332c752e245b3c566a99aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...