EUVD-2025-112978

Malicious code in halley-cressida-gacrux-hyperion npm...

EUVD-2025-113608

Malicious code in firebase-meissa-loopback-event npm...

EUVD-2025-114926

Malicious code in cosmiconfig-google-commitlint-sagitta npm...

EUVD-2025-114440

Malicious code in docusaurus-kinetic-leda-karma npm...

EUVD-2025-115739

Malicious code in canopus-pavo-hexo-metalsmith npm...

EUVD-2025-116670

Malicious code in antares-polaris-vuetify-wolf npm...

EUVD-2025-116076

Malicious code in blaze-morgan-phoenix-scorpius npm...

EUVD-2025-115844

Malicious code in cache-aquarius-nodejs-middleware npm...

MAL-2025-149140 Malicious code in version-mdx-development-delphinus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1d7ea97e441bc8365483bdd5542b8f2597dbb2c78a69fee43619fa2f272459ca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149355 Malicious code in webdriver-mocha-metalsmith-ignite-fornax (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 84f8d1b4005ff300bf85096906929c42441da1b129e398d9053f3b4a03241c7a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140377 Malicious code in canopus-xanadu-markdownlint-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac0db4becaf61d04f82a2b7159858b15dc737727a86bd0c3f376ed3aaaa44ce8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148402 Malicious code in supervisor-semantic-release-vortex-jest (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a6100947e9d3906df533eeb01f8f6999202033b601f432aea1b8763b8a6e819 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144520 Malicious code in loglevel-run-script-cross-env-superagent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5274bbe00f3f0fdea25171e1d9b6e8028893566b13e1a05f6160aae69d26a73b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-117326

Malicious code in historical-yellow-walrus npm...

EUVD-2025-117235

Malicious code in mechanical-amber-panther npm...

EUVD-2025-117000

Malicious code in visiting-black-caterpillar npm...

EUVD-2025-117307

Malicious code in inc-tomato-hoverfly npm...

Malicious code in cognitive_canid_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e00247abc8ce946848d32ca39bc2a87ad6ebcf10f5a82e15b96db20512ed501 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dian-serabi17-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ee681e96c58c2f4dd4ddafa7370dc3b2e90372837f6457880e68c434135242b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mulyono-tumis85-riris (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc51b302d77730476677af6879b0623be9bc7e221ce55d97a9499fecb37303d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...