EUVD-2025-121996

Malicious code in shelljs-sagitta-forever-iota npm...

EUVD-2025-121621

Malicious code in stop-start-link-shelljs npm...

EUVD-2025-123555

Malicious code in polaris-shelljs-jekyll-sails npm...

EUVD-2025-123121

Malicious code in publish-pipe-antares-shelljs npm...

EUVD-2025-124573

Malicious code in nebula-meissa-shelljs-local npm...

EUVD-2025-124456

Malicious code in nightwatch-element-ui-wezen-shelljs npm...

EUVD-2025-111258

Malicious code in mensa-passport-module-shelljs npm...

EUVD-2025-122010

Malicious code in shelljs-farout-indus-version npm...

Malicious code in shelljs-chai-remark-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39bf01b624bd21b9a8a7cc6878f307cb778c3422e7632f710831cf26d0364bd9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116338

Malicious code in avior-cz-conventional-changelog-shelljs-zenobia npm...

EUVD-2025-124745

Malicious code in morgan-duplex-shelljs-odin npm...

EUVD-2025-122666

Malicious code in remark-shelljs-phoenix-sedna npm...

EUVD-2025-116905

Malicious code in achernar-geckodriver-element-ui-shelljs npm...

MAL-2025-149193 Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 488fcc3bef6ab42a047caf3a6e9d707eefc126e0dd734eaaaaa3ea53b5b917f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147928 Malicious code in shelljs-sedna-kaus-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6bd92185d5df059e6ea16e930861c0940b5e505fc65388e18f02aa9ea6e53dc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124541

Malicious code in neptune-shelljs-mysql-local npm...

EUVD-2025-122000

Malicious code in shelljs-nightmare-perseus-elektra npm...

EUVD-2025-114780

Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss npm...

EUVD-2025-120054

Malicious code in zephyr-airbnb-procyon-shelljs npm...

MAL-2025-141109 Malicious code in cordelia-shelljs-gulp-optimize-css-assets-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7027c32eb0a3ba723ebe11ca4df1274d19f003ef78d0984d760230a9baaef860 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...