EUVD-2025-124361

Malicious code in nodejs-cygnus-sync-markdown-pdf npm...

EUVD-2025-124360

Malicious code in nodejs-dependencies-unuk-duplex npm...

EUVD-2025-124359

Malicious code in nodejs-elektra-perseus-apollo npm...

EUVD-2025-124356

Malicious code in nodejs-frontend-sync-command npm...

EUVD-2025-124354

Malicious code in nodejs-hydra-jest-quito npm...

EUVD-2025-124349

Malicious code in nodejs-mongoose-dotenv-mongoose npm...

EUVD-2025-124347

Malicious code in nodejs-proxima-link-prettier npm...

EUVD-2025-124344

Malicious code in nodejs-relay-rest-deneb npm...

EUVD-2025-124237

Malicious code in npm-nodejs-umbriel-buffer npm...

EUVD-2025-124872

Malicious code in miranda-ora-module-nodejs npm...

EUVD-2025-122220

Malicious code in scorpius-betelgeuse-repository-nodejs npm...

EUVD-2025-124362

Malicious code in nodejs-csrf-dotenv-safe-solis npm...

EUVD-2025-112716

Malicious code in hugo-prompts-install-nodejs npm...

Malicious code in leda-async-nodejs-izar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 919099f39c4c627753c0eacb2c31a393a6a92e02b8a16c383406fc50a41281d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113982

Malicious code in equinox-nodejs-csrf-dagda npm...

MAL-2025-141247 Malicious code in cressida-vuepress-nconf-xml (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b3fad2a7701e8e70e72d43cee4ad37b3a44e2bbbc521f2696eaf92805c68b54 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124662

Malicious code in mysql-nodejs-callisto-framework npm...

Malicious code in sirius-fork-nodejs-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c6c1bd831399d8c2b516a325a12d79cba13a091a76042525b7e1c1c6feb29e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...