EUVD-2025-124035

Malicious code in ora-jekyll-nodejs-antd npm...

EUVD-2025-116788

Malicious code in algol-weywot-loopback-nodejs npm...

EUVD-2025-122716

Malicious code in relay-nodejs-gulp-proxima npm...

EUVD-2025-113468

Malicious code in fornax-polaris-nodejs-ignite npm...

EUVD-2025-124349

Malicious code in nodejs-mongoose-dotenv-mongoose npm...

Malicious code in google-sagitta-nodejs-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 338abc925116d84e0ecc7c1b0f9dda422e67c5ad6a11245fb5ce6333b89b3a63 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121962

Malicious code in sirius-nodejs-pino-chalk npm...

EUVD-2025-121885

Malicious code in soap-winston-antares-nodejs npm...

EUVD-2025-111140

Malicious code in mini-css-extract-plugin-graphql-karma-nodejs npm...

Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-relay-rest-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7eebe4eaebfa21765d31bb1cc219e53682e79a49f3b933f65fdcaeb12f33d106 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121090

Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs npm...

EUVD-2025-123950

Malicious code in parcel-sedna-react-bootstrap-nodejs npm...

Malicious code in pm2-xerxes-luna-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5728f29060650121e6a105763cb85fb35cb529f487913d7a652cc79c9e0087b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113319

Malicious code in galaxy-nodejs-ultra-wasat npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

EUVD-2025-116050

Malicious code in blitz-nodejs-postcss-umbra npm...

EUVD-2025-121641

Malicious code in start-ursa-nodejs-server npm...

Malicious code in blitz-nodejs-postcss-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45892fb45c9f93ca8fd5b90a65388042f2205a48413aa509a34733d2c1d972cd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in redis-europa-nodejs-rate-limiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e6c8ec825ff834f3e5e8833c43a6562685e59b8c189ec4687da1cad6bfd3a8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...