EUVD-2025-115848

Malicious code in bunyan-sirius-nashira-winston npm...

Malicious code in blitz-winston-vuetify-lyra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7545cd37a3003e0332a5956fb7b350048ecd2cc8fbaf2458e305ce077db3e275 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115057

Malicious code in configstore-fusion-mensa-winston npm...

EUVD-2025-120426

Malicious code in winston-koa-wasat-celeste npm...

EUVD-2025-115979

Malicious code in bootstrap-terser-webpack-plugin-winston-link npm...

Malicious code in andromeda-puppeteer-winston-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9da7751df8e8035a7d7a1e041dcaa9f572e67a2ba46dc6c4d55f8b77556815e5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115752

Malicious code in callisto-winston-socketio-dependencies npm...

EUVD-2025-121885

Malicious code in soap-winston-antares-nodejs npm...

Malicious code in winston-blaze-convict-luna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9405a26bbb3c5e2d9aa7aa5ddcb59c8ca86b807d28d65fb2f0a57974e0bc26b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in postcss-loader-winston-transport-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85ee82fc5bbb44b457adbfa013a4a759e5e0903d4a9c8be123b2c3e8ea262532 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113123

Malicious code in got-superagent-winston-rollup npm...

EUVD-2025-120430

Malicious code in winston-izar-winston-thuban npm...

EUVD-2025-120403

Malicious code in winston-sirius-lynx-publish npm...

EUVD-2025-124897

Malicious code in miranda-browserify-dorado-winston npm...

EUVD-2025-120411

Malicious code in winston-phoebe-aquarius-aurora npm...

EUVD-2025-121428

Malicious code in telesto-readable-forever-winston npm...

EUVD-2025-120420

Malicious code in winston-mongoose-izar-miranda npm...

EUVD-2025-115408

Malicious code in chariklo-ignite-winston-node-sass npm...

EUVD-2025-124587

Malicious code in nconf-winston-rigel-mensa npm...

Malicious code in winston-neptune-standard-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6100c7d0ff6d29306a6d718fbbbdcad4feab4d3512e557e86af8454531cfdf2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...