EUVD-2025-111424

Malicious code in markdown-pdf-frontend-rimraf-start npm...

EUVD-2025-116222

Malicious code in backend-chariklo-bellatrix-start npm...

EUVD-2025-111358

Malicious code in materialize-titan-start-morgan npm...

Malicious code in commitizen-start-radiant-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e86fb0200eb91237b731b34977008855e4d540ee3c1840f3df98357cd0215351 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113653

Malicious code in fetch-start-carpo-pino npm...

EUVD-2025-123281

Malicious code in promise-graphql-start-superagent npm...

EUVD-2025-114158

Malicious code in elektra-start-apex-radiant npm...

EUVD-2025-114487

Malicious code in development-ini-start-epimetheus npm...

EUVD-2025-121154

Malicious code in transform-start-halley-cassini npm...

EUVD-2025-121643

Malicious code in start-stop-terser-hermes npm...

Malicious code in rollup-buffer-superagent-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c94961fce5ea04ac8cfdfb74d49339851ca055ba99c0a733abafa399d2879bf4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122127

Malicious code in sedna-start-semantic-ui-yildun npm...

EUVD-2025-121663

Malicious code in start-avior-node-config-zephyr npm...

EUVD-2025-112875

Malicious code in helios-odin-start-stream npm...

EUVD-2025-111531

Malicious code in luna-start-prettier-stylelint-rest npm...

EUVD-2025-115371

Malicious code in charon-start-miranda-zephyr npm...

Malicious code in start-jest-umbra-standard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c2a714daaf767bc9fef0910ad4c37405fcbc88ae14e3ddc1bcb4bb91c35ab41f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116039

Malicious code in blitz-tailwindcss-json-start npm...

Malicious code in start-mongoose-scripts-sync (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c9c8881d3331a199f19842e80240df5da41adea1181cadde5924c73d69f70e38 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in lynx-rollup-centaurus-start (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 591ec6229ab2705b8162f934c9e360700e809c8b16462a0ef13912f665240b26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...