EUVD-2025-115427

Malicious code in changelog-query-adonis-equinox npm...

EUVD-2025-120372

Malicious code in wolf-polaris-zenith-commitizen npm...

EUVD-2025-120627

Malicious code in wasat-scripts-ariel-jabbah npm...

EUVD-2025-112865

Malicious code in helmet-convict-mongoose-cz-conventional-changelog npm...

EUVD-2025-121822

Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin npm...

EUVD-2025-121132

Malicious code in transport-playwright-zenobia-orbit npm...

EUVD-2025-121195

Malicious code in tool-dotenv-safe-deimos-magellan npm...

EUVD-2025-114291

Malicious code in duplex-procyon-polaris-mutation npm...

EUVD-2025-111730

Malicious code in library-pavo-impulse-andromeda npm...

MAL-2025-141883 Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0366b7f17be78889c22880bd1190e5627d5bd6527dfbdc5052a910a723993563 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111903

Malicious code in koa-xml-chariklo-perseus npm...

EUVD-2025-123400

Malicious code in prettier-stylelint-tool-ora-solis npm...

EUVD-2025-121596

Malicious code in stream-run-script-got-morgan npm...

EUVD-2025-114327

Malicious code in dotenv-safe-wezen-loop-restart npm...

EUVD-2025-116246

Malicious code in babel-dotenv-safe-cosmos-resolvers npm...

EUVD-2025-120192

Malicious code in xml-ursa-uglify-js-zenobia npm...

EUVD-2025-124730

Malicious code in morgan-typeorm-auth-bellatrix npm...

EUVD-2025-123262

Malicious code in prompts-await-phoenix-deneb npm...

EUVD-2025-124303

Malicious code in non-blocking-phoenix-figures-algol npm...

EUVD-2025-116809

Malicious code in algol-chromedriver-pegasus-kronos npm...