EUVD-2025-115124

Malicious code in commitlint-fetch-quark-react-bootstrap npm...

EUVD-2025-113611

Malicious code in firebase-io-webdriverio-react-bootstrap npm...

EUVD-2025-113419

Malicious code in framework-react-bootstrap-alphard-supervisor npm...

EUVD-2025-113462

Malicious code in fornax-react-bootstrap-halley-fork npm...

Malicious code in bootstrap-slidev-luna-bellatrix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cfd3f94ac4f1f9ffbfd360578688007afffe72b4e251a09579a1ce567d746749 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116739

Malicious code in altair-rollup-bootstrap-webdriver-manager npm...

EUVD-2025-115996

Malicious code in bootstrap-gemini-carpo-registry npm...

EUVD-2025-116834

Malicious code in aldebaran-bootstrap-mensa-graphql npm...

EUVD-2025-112694

Malicious code in husky-ganymede-pm2-react-bootstrap npm...

EUVD-2025-122872

Malicious code in react-bootstrap-achernar-procyon-mini-css-extract-plugin npm...

EUVD-2025-122849

Malicious code in react-bootstrap-rocket-async-meteor npm...

EUVD-2025-122851

Malicious code in react-bootstrap-polaris-prompts-duplex npm...

EUVD-2025-111573

Malicious code in loopback-bootstrap-yonder-iota npm...

EUVD-2025-122817

Malicious code in redis-izar-react-bootstrap-run-script npm...

EUVD-2025-124496

Malicious code in nextjs-react-bootstrap-dependencies-nova npm...

EUVD-2025-122491

Malicious code in rigel-kronos-react-bootstrap-server npm...

EUVD-2025-124180

Malicious code in oberon-apex-react-bootstrap-json npm...

EUVD-2025-124437

Malicious code in nightwatch-sagitta-react-bootstrap-xanadu npm...

EUVD-2025-122587

Malicious code in resolvers-scorpius-react-bootstrap-rocket npm...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...