EUVD-2025-123785

Malicious code in phenomic-json-nodejs-configstore npm...

EUVD-2025-124355

Malicious code in nodejs-grus-gacrux-auriga npm...

EUVD-2025-124872

Malicious code in miranda-ora-module-nodejs npm...

EUVD-2025-112368

Malicious code in iota-umbra-upgrade-nodejs npm...

Malicious code in ora-achernar-kinetic-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 466b3999a1f913ccb9440477973486798c1cb1a637ffaeb420dd26a67dd1f17c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113143

Malicious code in google-sagitta-nodejs-nightwatch npm...

EUVD-2025-124347

Malicious code in nodejs-proxima-link-prettier npm...

EUVD-2025-116546

Malicious code in aquarius-venus-nodejs-soap npm...

EUVD-2025-122273

Malicious code in sails-javascript-nodejs-achernar npm...

EUVD-2025-112979

Malicious code in halley-cosmiconfig-nodejs-ganymede npm...

EUVD-2025-113468

Malicious code in fornax-polaris-nodejs-ignite npm...

MAL-2025-140426 Malicious code in carina-transport-nodejs-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9674ba3bb4b51d8d50b8bcffcf19428bbdce221fc44e026cbf3f7e6947c75775 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124360

Malicious code in nodejs-dependencies-unuk-duplex npm...

EUVD-2025-120073

Malicious code in zenith-polaris-warp-nodejs npm...

Malicious code in testcafe-xenon-chakra-ui-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e267c663a12b26a567a3e6b07f7a2e36b7ae20b41b5d94b5f4b655fd5f09d444 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123659

Malicious code in pipe-dynamo-nodejs-stream npm...

EUVD-2025-124362

Malicious code in nodejs-csrf-dotenv-safe-solis npm...

Malicious code in nodejs-framework-taurus-pyxis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ca5c47a0b91aef35c306426d598941c157a29b968536ca1515fea6acd250949 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nodejs-dependencies-unuk-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 071fc09dfbb31483cee6efe94d252e17936fa2604f6c450ed55d774c64b7e440 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124237

Malicious code in npm-nodejs-umbriel-buffer npm...