EUVD-2025-112534

Malicious code in indus-transport-chakra-ui-ini npm...

EUVD-2025-121138

Malicious code in transport-install-unuk-deimos npm...

EUVD-2025-122041

Malicious code in sequelize-transport-wezen-auriga npm...

EUVD-2025-111548

Malicious code in loopback-transport-telesto-gatsby npm...

EUVD-2025-122448

Malicious code in rocket-node-sass-transport-buffer npm...

EUVD-2025-121128

Malicious code in transport-remark-dorado-ignite npm...

EUVD-2025-114775

Malicious code in css-minimizer-webpack-plugin-transport-spawn-command npm...

EUVD-2025-124584

Malicious code in nebula-bulma-transport-capella npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-124738

Malicious code in morgan-less-loader-fusion-transport npm...

EUVD-2025-121146

Malicious code in transport-cressida-sadr-sadr npm...

Malicious code in transport-dynamo-hyperion-babel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8e02a9b6950f1c0062ca81f751201a1d3e82b793e604f56bfe93c574fe06b780 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115558

Malicious code in centaurus-publish-zenith-transport npm...

EUVD-2025-121140

Malicious code in transport-hyperion-luna-loglevel npm...

EUVD-2025-121123

Malicious code in transport-ursa-lyra-yakutsk npm...

MAL-2025-148785 Malicious code in transport-dotenv-safe-kinetic-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c6b8a22e012e02ef3e3bac4f30177cc000a714bfbb20f47e5f2752d82dad8e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124443

Malicious code in nightwatch-phoebe-transport-zenith npm...

MAL-2025-139568 Malicious code in arcturus-dependencies-transport-child-process (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector db2d815a4e59b1e9af12dc14986473fddc308775a2b32f5d80b55972e49c4916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142825 Malicious code in ganymede-transport-yildun-npm (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aaf3f0c5ca2acfee1382cd58e3ab88f5ca02c19f4b4e3351703b06dfafa6db26 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140095 Malicious code in bootes-vulcan-transport-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8d41e24e945045beb52518b6e682a15231870631f15e6014c5b9d677f7b405d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...