EUVD-2025-123073

Malicious code in pulsar-zenobia-sirius-callback npm...

EUVD-2025-115021

Malicious code in convict-rehype-callback-npm npm...

EUVD-2025-121995

Malicious code in shelljs-sedna-kaus-callback npm...

MAL-2025-140298 Malicious code in callback-centauri-enif-zephyr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 99a679174385d73c39620a1a37cbb39b69e452416d7479c489f935ba04496cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115790

Malicious code in callback-semantic-ui-pulsar-telesto npm...

EUVD-2025-115795

Malicious code in callback-request-subscription-titan npm...

EUVD-2025-123463

Malicious code in prettier-callback-docusaurus-cz-conventional-changelog npm...

EUVD-2025-124848

Malicious code in mocha-chariklo-callback-pulsar npm...

EUVD-2025-112631

Malicious code in hyperion-janus-mutation-callback npm...

EUVD-2025-124289

Malicious code in non-blocking-xml-procyon-callback npm...

EUVD-2025-123013

Malicious code in quantum-mensa-callback-altair npm...

EUVD-2025-115798

Malicious code in callback-puppeteer-janus-global npm...

EUVD-2025-115239

Malicious code in comet-callback-eridanus-ini npm...

EUVD-2025-120797

Malicious code in version-callback-husky-castor npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-123211

Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin npm...

MAL-2025-149589 Malicious code in xanadu-callback-request-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 26cf5680828ccf264b0c7c676df6028edd1e2c4f2e5ca2153794fe92a09f8f4e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149132 Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in centaurus-bootstrap-callback-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d7969750400aaf0b8947f7695420d28f460891a0d6b84261f1405f84b7010400 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112553

Malicious code in indus-callback-achernar-dorado npm...