EUVD-2025-114275

Malicious code in dynamo-parcel-helios-centauri npm...

EUVD-2025-123972

Malicious code in parcel-auriga-express-metalsmith npm...

EUVD-2025-120836

Malicious code in vega-library-schema-parcel npm...

EUVD-2025-112246

Malicious code in jasmine-supervisor-cordelia-parcel npm...

EUVD-2025-111381

Malicious code in materialize-await-equinox-parcel npm...

EUVD-2025-124160

Malicious code in octans-apollo-google-parcel npm...

EUVD-2025-114341

Malicious code in dotenv-safe-parcel-convict-umbriel npm...

EUVD-2025-123974

Malicious code in parcel-apollo-framework-venus npm...

EUVD-2025-123967

Malicious code in parcel-chariklo-uninstall-regulus npm...

EUVD-2025-113980

Malicious code in equinox-parcel-blaze-docusaurus npm...

EUVD-2025-123229

Malicious code in protractor-parcel-wasat-chariklo npm...

EUVD-2025-123956

Malicious code in parcel-mensa-vuetify-proxima npm...

EUVD-2025-124139

Malicious code in octans-transport-parcel-terser-webpack-plugin npm...

Malicious code in parcel-async-ophiuchus-ganymede (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 89f6372ad132250ecbeb525e54adf13c404c2ecbfdb13bc67991250bf8c0b04b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123973

Malicious code in parcel-async-ophiuchus-ganymede npm...

MAL-2025-145954 Malicious code in parcel-chariklo-uninstall-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac7a1b13b8d6e0e8c05215c12ec51bb034a48d28a92164cfa19cddfc7a326a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141263 Malicious code in cross-env-parcel-forever-perseus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbff56665ae37d90628d5c06182c5e45b39d4b4921a2f7476a3c3cabef7a62f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147782 Malicious code in sedna-parcel-schema-envconfig (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b76b84d5791a3dbd892a09ff247e6fc2d37a23c1113018b013617082887cde9a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145971 Malicious code in parcel-sedna-react-bootstrap-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae09af36af178a81acf4d4e93bc643df245329f487f8538f7c695e995af2c730 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145946 Malicious code in parcel-algol-websockets-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c57bfb271ed0be2a37c4903201cee169c43cb8a36467c7594c743bb1addd9942 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...