EUVD-2025-123948

Malicious code in parcel-subscription-aquarius-puppeteer npm...

EUVD-2025-114846

Malicious code in cross-env-parcel-forever-perseus npm...

EUVD-2025-121911

Malicious code in soap-antd-antares-parcel npm...

EUVD-2025-123011

Malicious code in quantum-parcel-tailwindcss-less-loader npm...

EUVD-2025-122687

Malicious code in release-it-sass-loader-parcel-fork npm...

Malicious code in vega-library-schema-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55dcc95f4dea0db952210a246c97eca63e5bda6d4afe8728102b9082fb2aeeef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-auriga-express-metalsmith (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97e704fcb48a26e6e92d57e74702f29a59010b27f3610b7b864318db8bc6ccf7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123736

Malicious code in phoebe-triton-parcel-javascript npm...

EUVD-2025-123359

Malicious code in process-parcel-pino-pretty-csrf npm...

EUVD-2025-116219

Malicious code in backend-configstore-ultra-parcel npm...

EUVD-2025-123123

Malicious code in publish-parcel-mysql-hermes npm...

EUVD-2025-123968

Malicious code in parcel-carpo-cypress-sync npm...

EUVD-2025-116562

Malicious code in aquarius-mdx-parcel-subscription npm...

EUVD-2025-116866

Malicious code in aether-parcel-equinox-cordelia npm...

EUVD-2025-120215

Malicious code in xerxes-repository-parcel-ora npm...

EUVD-2025-116589

Malicious code in apollo-fornax-parcel-frontend npm...

Malicious code in proxima-xerxes-await-parcel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5410adaf1035021a86a15b259d7ce60dc0365d4b361a661abd6d2fcce409b986 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in parcel-winston-janus-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85fa490b9c442ed1f763545052dcf9ce8a51b65c8331ca58d552ddb81ba2f85f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121283

Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione npm...

Malicious code in release-it-sass-loader-parcel-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c5b769cb83d4424c30fd9e0d87d8ae149c3c2188ae87c28d2c06b4ec5c28b15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...