EUVD-2025-111285

Malicious code in meissa-prompts-winston-luna npm...

EUVD-2025-111586

Malicious code in loop-mensa-xml-winston npm...

EUVD-2025-114323

Malicious code in dotenv-winston-yakutsk-csrf npm...

EUVD-2025-112263

Malicious code in jasmine-draco-winston-castor npm...

Malicious code in nconf-winston-standard-alphard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 086b04cfd8166306ace16ae10617a82ce742c1e4c850c2ad0b65a119cc5913f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115779

Malicious code in callisto-cordelia-winston-webdriver-manager npm...

Malicious code in metalsmith-xml-thuban-winston (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94f60078b97cbd0fccfbf8cce00fe77723c5d62b3bf09c43ef64de4ce5da2320 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114372

Malicious code in dotenv-parse-variables-vuetify-winston-sass-loader npm...

EUVD-2025-123181

Malicious code in proxima-slidev-spinner-winston npm...

EUVD-2025-123398

Malicious code in prettier-stylelint-winston-xenos-capella npm...

EUVD-2025-120427

Malicious code in winston-jwt-sails-polaris npm...

Malicious code in winston-cressida-pino-pretty-quito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6a3441bac52f6ab46845742e476292cd0397993919d4f7c7c5a3ac96275eed29 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-120448

Malicious code in winston-cache-stop-request npm...

EUVD-2025-111102

Malicious code in mira-perseus-delphinus-winston npm...

EUVD-2025-120394

Malicious code in winston-yildun-less-loader-dactyl npm...

EUVD-2025-115628

Malicious code in cassini-winston-helmet-juno npm...

EUVD-2025-122727

Malicious code in relay-auth-cassini-winston npm...

EUVD-2025-120415

Malicious code in winston-nightwatch-sagitta-aldebaran npm...

EUVD-2025-112100

Malicious code in jsonp-winston-rollup-plugin-spica npm...

Malicious code in browserify-winston-yaml-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98d1d5177935693defaa858303568bb9b915d0de3db14a9ae01287160689c3fd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...