EUVD-2025-112715

Malicious code in hugo-react-bootstrap-nestjs-andromeda npm...

EUVD-2025-123887

Malicious code in pegasus-helios-bootstrap-meissa npm...

EUVD-2025-114040

Malicious code in envconfig-bootstrap-uglify-js-colors npm...

EUVD-2025-111805

Malicious code in less-cors-bootstrap-lyra npm...

EUVD-2025-115988

Malicious code in bootstrap-ophiuchus-elara-transport npm...

EUVD-2025-116206

Malicious code in backend-ursa-achernar-react-bootstrap npm...

EUVD-2025-115998

Malicious code in bootstrap-fornax-test-atlas npm...

EUVD-2025-115980

Malicious code in bootstrap-standard-yonder-miranda npm...

EUVD-2025-113555

Malicious code in forever-algol-react-bootstrap-chakra-ui npm...

EUVD-2025-122616

Malicious code in request-react-bootstrap-eslint-config-superagent npm...

EUVD-2025-115359

Malicious code in child-process-graphql-unuk-bootstrap npm...

EUVD-2025-122862

Malicious code in react-bootstrap-hapi-init-quantum npm...

Malicious code in react-bootstrap-magellan-xanthus-scorpius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863ae5bc0172f654995249a5a80e3bb2e62bf625d2f7599bfb7ff3166df47fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124120

Malicious code in odin-run-script-scripts-bootstrap npm...

EUVD-2025-112718

Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin npm...

EUVD-2025-114785

Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda npm...

EUVD-2025-112350

Malicious code in izar-sails-eslint-plugin-bootstrap npm...

EUVD-2025-122855

Malicious code in react-bootstrap-mongodb-phenomic-google npm...

EUVD-2025-114388

Malicious code in dotenv-parse-variables-google-react-bootstrap-castor npm...

MAL-2025-146065 Malicious code in perseus-adonis-bootstrap-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d9206394df2838ca6f7266532d7adf22db31c96e82344383f3159523e109e17 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...