MAL-2025-140120 Malicious code in bootstrap-shelljs-enif-cassini (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f5d6bce3ea521ea3b8fa5d1f0d8d3c503d7a97fd2f7dc25e2a87d579491600c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111258

Malicious code in mensa-passport-module-shelljs npm...

EUVD-2025-116413

Malicious code in auriga-shelljs-titan-janus npm...

EUVD-2025-114310

Malicious code in draco-wasat-neptune-shelljs npm...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

EUVD-2025-120269

Malicious code in xenon-shelljs-chariklo-loglevel npm...

EUVD-2025-122012

Malicious code in shelljs-csv-antares-changelog npm...

EUVD-2025-122206

Malicious code in scorpius-shelljs-jekyll-meissa npm...

EUVD-2025-122005

Malicious code in shelljs-library-development-commitlint npm...

MAL-2025-139199 Malicious code in achernar-hexo-betelgeuse-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22485d24156f5b7a844676474ff062663cacf70de836551462b306a1bc5dddbb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121999

Malicious code in shelljs-nova-xenon-got npm...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114789

Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict npm...

EUVD-2025-123555

Malicious code in polaris-shelljs-jekyll-sails npm...

EUVD-2025-124541

Malicious code in neptune-shelljs-mysql-local npm...

EUVD-2025-122001

Malicious code in shelljs-nestjs-orbit-release-it npm...

EUVD-2025-124657

Malicious code in mysql-pm2-ceres-shelljs npm...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

EUVD-2025-122011

Malicious code in shelljs-europa-cosmiconfig-concurrently npm...

Malicious code in antares-shelljs-vega-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744231827bd2a82b04772b377409872008fb9107fe387353ebbc28a5be47aa13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...