Malicious code in spica-nextjs-draco-despina (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 104bee7c9443b8b60097c56006cf5a5de3a744041d0782374f5a0436e9132b2e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in taurus-castor-concurrently-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6fe561439df87bdc121339b0b1da0ea314d89fbf61cc470407caebb67f86795 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in venus-deimos-public-nextjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba1d0d778c8df669fba403d905c69e073ea9e7cb886541e7d250b5deeda1742b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113330

Malicious code in gacrux-sedna-nextjs-nconf npm...

EUVD-2025-113254

Malicious code in geckodriver-centaurus-nextjs-figures npm...

EUVD-2025-113172

Malicious code in global-lacerta-sagitta-nextjs npm...

EUVD-2025-112822

Malicious code in hercules-nextjs-zephyr-install npm...

EUVD-2025-113935

Malicious code in eris-hermes-nextjs-spinner npm...

EUVD-2025-113644

Malicious code in figures-fusion-nextjs-auth0 npm...

EUVD-2025-114918

Malicious code in cosmiconfig-nextjs-tailwindcss-polaris npm...

EUVD-2025-114779

Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe npm...

EUVD-2025-115810

Malicious code in callback-bellatrix-dotenv-safe-nextjs npm...

EUVD-2025-115150

Malicious code in commitlint-config-angular-bulma-nextjs-aether npm...

EUVD-2025-114979

Malicious code in cors-publish-commitlint-nextjs npm...

EUVD-2025-116491

Malicious code in astro-nextjs-sedna-child-process npm...

EUVD-2025-116157

Malicious code in bellatrix-nextjs-jupiter-dagda npm...

EUVD-2025-115883

Malicious code in bulma-nextjs-playwright-superagent npm...

EUVD-2025-116819

Malicious code in aldebaran-nextjs-ceres-library npm...

Malicious code in zenobia-nextjs-despina-prompts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c39b2b8df8c767b81fc7ef59247aa5eb4ec4ed8f9332c752e245b3c566a99aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144125 Malicious code in kastra-nextjs-tethys-acamar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5237449ddd14cad0c7a757cf5ecff71002c9c6726139843650a1a07f68385093 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...