EUVD-2025-116615

Malicious code in apex-unuk-postgres-standard npm...

EUVD-2025-115114

Malicious code in commitlint-readable-standard-levels npm...

EUVD-2025-121237

Malicious code in titan-polaris-wolf-standard npm...

EUVD-2025-112654

Malicious code in hydra-standard-dependencies-fornax npm...

EUVD-2025-123081

Malicious code in pulsar-quito-standard-pegasus npm...

Malicious code in rehype-nextjs-xenon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d727a33ec08ff0d055e7f2c12a05f0637219bcf225ace11ae4c8b75402577cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122403

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...

EUVD-2025-115533

Malicious code in ceres-react-bootstrap-gatsby-standard npm...

EUVD-2025-121426

Malicious code in telesto-sails-bootes-standard npm...

EUVD-2025-114500

Malicious code in despina-standard-sagitta-norma npm...

EUVD-2025-121671

Malicious code in standard-eslint-plugin-mutation-standard npm...

EUVD-2025-122388

Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular npm...

EUVD-2025-115473

Malicious code in chalk-dactyl-orbit-standard npm...

EUVD-2025-113612

Malicious code in firebase-google-castor-standard npm...

EUVD-2025-111335

Malicious code in mdx-standard-carina-global npm...

EUVD-2025-112140

Malicious code in json-figures-gatsby-standard npm...

EUVD-2025-121666

Malicious code in standard-schema-ophiuchus-cors npm...

MAL-2025-139659 Malicious code in atlas-standard-global-jekyll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d6e6f40857900117e23b70df586911da4b9a5d7ea29996d0dc9e08ae33ccf5c4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148502 Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...