EUVD-2025-123073

Malicious code in pulsar-zenobia-sirius-callback npm...

EUVD-2025-115803

Malicious code in callback-package-apollo-chariklo npm...

EUVD-2025-115802

Malicious code in callback-package-tethys-less-loader npm...

Malicious code in callback-package-tethys-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 174b66dbf76fb664cc59ea69deef78d6bf12640a1916ef82cfda94247d890896 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sap-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f0b91bc0b188eccdbfa45b832c2b83829cf849c65f51d2c5cb8c9896a210cb5e The OpenSSF Package Analysis project identified 'sap-callback' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...