EUVD-2025-114868

Malicious code in cressida-repository-mutation-thuban npm...

EUVD-2025-112281

Malicious code in janus-sails-repository-repository npm...

EUVD-2025-120272

Malicious code in xenon-repository-radiant-configstore npm...

EUVD-2025-115632

Malicious code in cassini-repository-miranda-nightmare npm...

EUVD-2025-113898

Malicious code in eslint-config-thuban-repository-hexo npm...

Malicious code in pino-cypress-nova-commitizen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4314605ac8a292040082df3767736ead396067f88d0193a18f4a19f922f5119f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113758

Malicious code in exec-mocha-pipe-repository npm...

EUVD-2025-120395

Malicious code in winston-yaml-webdriver-mocha-repository npm...

Malicious code in tool-spectron-flare-repository (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4bedb9911b41711fcf4f6c6e7513c584bcce63553d1287bed2b66b9ea07353f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121174

Malicious code in tool-spectron-flare-repository npm...

EUVD-2025-113239

Malicious code in geckodriver-markdownlint-websockets-repository npm...

Malicious code in babel-element-ui-scripts-pegasus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ebeca5dc51f6d677f9931369a829d3c0eb57c1863bb8ca1dfa8400cdcc5abf66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111642

Malicious code in lint-staged-xerxes-repository-metalsmith npm...

EUVD-2025-122640

Malicious code in repository-spinner-chakra-ui-airbnb npm...

Malicious code in apex-websockets-bellatrix-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d07b72c3f5eb73e5033d0289424e9a6446f69a95e66a24abcc4276a7233776a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115951

Malicious code in buffer-canopus-winston-repository npm...

EUVD-2025-115070

Malicious code in config-sails-repository-prompts npm...

EUVD-2025-122642

Malicious code in repository-prompts-rate-limiter-passport npm...

EUVD-2025-122661

Malicious code in repository-cross-env-centaurus-colors npm...

MAL-2025-148479 Malicious code in taurus-repository-scorpius-antares (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64dd0eef2dc8375f15ed1284e0fc760f7af5017e3c26b9425fef93b6c483214e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...