EUVD-2025-124366

Malicious code in node-sass-tool-resolvers-winston npm...

EUVD-2025-115954

Malicious code in buffer-achernar-winston-triton npm...

EUVD-2025-113601

Malicious code in firebase-relay-winston-webdriverio npm...

EUVD-2025-114810

Malicious code in csrf-winston-koa-nextjs npm...

EUVD-2025-120436

Malicious code in winston-gatsby-zenobia-eslint npm...

EUVD-2025-122437

Malicious code in rocket-unuk-atlas-winston npm...

EUVD-2025-120418

Malicious code in winston-neptune-standard-procyon npm...

EUVD-2025-120452

Malicious code in winston-ariel-apex-sagitta npm...

EUVD-2025-114427

Malicious code in docusaurus-winston-ultra-neptune npm...

EUVD-2025-114498

Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede npm...

EUVD-2025-115358

Malicious code in child-process-init-winston-frontend npm...

EUVD-2025-120429

Malicious code in winston-javascript-fork-pino npm...

Malicious code in winston-tethys-epimetheus-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3796b6e0948a85433990e0bdf3e3701014a6a6b5ef4f750248adba4e27d670c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114287

Malicious code in duplex-winston-loop-hyperion npm...

EUVD-2025-120414

Malicious code in winston-nodemon-electron-builder-rest npm...

EUVD-2025-113284

Malicious code in ganymede-winston-enif-lacerta npm...

Malicious code in loop-mensa-xml-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 588fd6e066e2dd3092837d1df974d64a5ad7b55e0b95e3888d7853b746fbb1dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120439

Malicious code in winston-eslint-config-impulse-pino-pretty npm...

EUVD-2025-120849

Malicious code in ursa-winston-slides-neptune npm...

Malicious code in triton-winston-sequelize-kaus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22c91203ffc4eaf0a77c65aea9d37896efad90ded7919815c783620b1c063974 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...