EUVD-2025-115816

Malicious code in cache-xo-ini-wolf npm...

EUVD-2025-112902

Malicious code in heka-ophiuchus-cache-europa npm...

EUVD-2025-115822

Malicious code in cache-shelljs-europa-kinetic npm...

EUVD-2025-115834

Malicious code in cache-halley-ini-apollo npm...

EUVD-2025-116709

Malicious code in antares-cache-andromeda-dotenv-parse-variables npm...

EUVD-2025-115043

Malicious code in configstore-titan-spica-cache npm...

EUVD-2025-115844

Malicious code in cache-aquarius-nodejs-middleware npm...

EUVD-2025-115806

Malicious code in callback-levels-cz-conventional-changelog-cache npm...

EUVD-2025-111380

Malicious code in materialize-cache-socketio-eleventy npm...

Malicious code in html-webpack-plugin-cache-spawn-jovian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 15fbaa78ca0f18a5e9ed1f2a13da754a46cc25dcf6e512c8966c3e4f105e78f3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-113329

Malicious code in gacrux-style-loader-cache-comet npm...

EUVD-2025-121966

Malicious code in sirius-lacerta-cache-callisto npm...

EUVD-2025-115843

Malicious code in cache-auth0-ceres-yildun npm...

EUVD-2025-111852

Malicious code in leda-command-superagent-cache npm...

EUVD-2025-121507

Malicious code in sync-deimos-cache-husky npm...

Malicious code in sails-colors-aquarius-cache (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 911081cb46abd2de21389ef7af5d7911dec4ce37cd1ff6eec6f1cd82585dcc96 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115826

Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx npm...

EUVD-2025-116833

Malicious code in aldebaran-cache-repository-npm npm...

MAL-2025-141364 Malicious code in cygnus-cache-magellan-run-script (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 871df337f77dbbb8e35ff5cf417b96faddccf076a47434e71e0ee1943d2ab16a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140277 Malicious code in cache-npm-terser-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73495f3f6d6f890c5217244c23479680bbf04462af47a50c402ea11b7e78792b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...