EUVD-2025-116557

Malicious code in aquarius-phoenix-prompts-run-script npm...

EUVD-2025-124196

Malicious code in oauth-corvus-atlas-run-script npm...

EUVD-2025-115110

Malicious code in commitlint-zenobia-run-script-superagent npm...

EUVD-2025-122375

Malicious code in run-script-metalsmith-init-commitlint-config-angular npm...

EUVD-2025-122367

Malicious code in run-script-vuepress-bootes-enceladus npm...

EUVD-2025-120503

Malicious code in websockets-run-script-websockets-mira npm...

Malicious code in xanadu-run-script-ceres-loopback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b73720185a49ac547966c6348249905b0f45dbf95e66130c616a4d286437636 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in odin-run-script-scripts-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c79508cd48643557f134d37f5b6eb9f3da8274a39beb434b88d43ed6e801e5e2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in thuban-run-script-callback-meteor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae8cab59643f284802fbb4cbd2c8e1b457e20dcfeb60ba0e2de324276c9adc97 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-run-script-json-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a487508b75acecea952348bb04e9172b5b203a5e9a7c982696c74b83d7457b0d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in markdownlint-standard-run-script-comet (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9c922258173b565aad147f7ab8c8f6e2bd3797075453bb4b7d65c9e6481e66d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123931

Malicious code in pavo-antares-run-script-lyra npm...

EUVD-2025-124368

Malicious code in node-sass-run-script-chariklo-uninstall npm...

EUVD-2025-121264

Malicious code in thuban-run-script-callback-meteor npm...

EUVD-2025-116741

Malicious code in altair-pulsar-run-script-procyon npm...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-114273

Malicious code in dynamo-run-script-nashira-markdownlint npm...

Malicious code in run-script-ophiuchus-cors-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1a09fd213361677312c1ca5e7462ebe175bcc01115ff87099c130dd7a70fdb5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123078

Malicious code in pulsar-run-script-redis-convict npm...

EUVD-2025-111618

Malicious code in local-run-script-ophiuchus-global npm...