EUVD-2025-120839

Malicious code in vega-gatsby-backend-standard npm...

EUVD-2025-121677

Malicious code in standard-aquarius-css-loader-webdriver-mocha npm...

EUVD-2025-121676

Malicious code in standard-ariel-umbra-eclipse npm...

EUVD-2025-121664

Malicious code in standard-wolf-koa-commitlint npm...

EUVD-2025-122301

Malicious code in sagitta-standard-corvus-slides npm...

EUVD-2025-122128

Malicious code in sedna-standard-element-ui-wezen npm...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122403

Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard npm...

EUVD-2025-123272

Malicious code in promise-standard-phoenix-venus npm...

EUVD-2025-115980

Malicious code in bootstrap-standard-yonder-miranda npm...

EUVD-2025-115473

Malicious code in chalk-dactyl-orbit-standard npm...

EUVD-2025-113528

Malicious code in fork-csv-standard-async npm...

EUVD-2025-124586

Malicious code in nconf-winston-standard-alphard npm...

Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112654

Malicious code in hydra-standard-dependencies-fornax npm...

MAL-2025-149090 Malicious code in vega-gatsby-backend-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1ef9239b9a48a8b8028f1bb79e1822e9bce3d82bdeba0246f6ac3e17e3a88318 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148502 Malicious code in telesto-sails-bootes-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d609428dc28221939fc9494afcdd831c1230dcb226b52ce23422c34b259723c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147178 Malicious code in rehype-nextjs-xenon-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d727a33ec08ff0d055e7f2c12a05f0637219bcf225ace11ae4c8b75402577cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148691 Malicious code in titan-polaris-wolf-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e9cd593eb7cd0784d0722fc9a9b4d17c974690e19d815b6ecb4f18d1ba7ba392 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148247 Malicious code in standard-airbnb-pulsar-nightwatch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f7bbc9a54197108d5227e17926f1c7b477b3b3c8dfe3b222333e539cd29d282 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...