EUVD-2025-123818

Malicious code in perseus-playwright-ini-non-blocking npm...

EUVD-2025-124470

Malicious code in nightmare-ursa-non-blocking-subscription npm...

EUVD-2025-122116

Malicious code in selenium-module-non-blocking-postgres npm...

EUVD-2025-116363

Malicious code in auth0-betelgeuse-phoebe-non-blocking npm...

EUVD-2025-120243

Malicious code in xenos-repository-non-blocking-triton npm...

EUVD-2025-124058

Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares npm...

EUVD-2025-124309

Malicious code in non-blocking-kastra-eslint-config-babel npm...

EUVD-2025-124321

Malicious code in non-blocking-antares-configstore-dorado npm...

EUVD-2025-120200

Malicious code in xml-non-blocking-unuk-sirius npm...

EUVD-2025-124294

Malicious code in non-blocking-supervisor-ophiuchus-eclipse npm...

EUVD-2025-114880

Malicious code in cressida-eris-non-blocking-bulma npm...

EUVD-2025-112483

Malicious code in init-quito-farout-non-blocking npm...

MAL-2025-143804 Malicious code in janus-cors-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab10dd4a20efdee524a8a1e195d284589d12d19dfdb7436f4055a944dc3aa658 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-121934

Malicious code in slides-non-blocking-dotenv-safe-loopback npm...

EUVD-2025-123042

Malicious code in pyxis-karma-sadr-non-blocking npm...

EUVD-2025-121303

Malicious code in tethys-non-blocking-hexo-spinner npm...

MAL-2025-148992 Malicious code in update-chai-non-blocking-jwt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector edf2732f6a507f3ea2e09ca7ff7251f8705a48a4d88fad8e4c2827383fd31c15 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145622 Malicious code in non-blocking-sqlite-toml-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f2d064b51a14b25c29553073d981f25fb78805790a2a4cbb554a1dc26efbc8e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149225 Malicious code in vulcan-browserify-non-blocking-relay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44f75a901684e76d93228851b85ee37e80b481a39a673e1769eefa38f79d23ba This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146631 Malicious code in promise-aether-private-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e995c1fb742ffaa236c62457efe3e86f89afb596a418f5b4fec72fee723daec2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...