Malicious code in dagda-castor-xo-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 423da8885f6bb0609f244a9e0ff6b0ccfa187e1af076268693e93b0c2bf6a404 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114574

Malicious code in deneb-callback-terser-wasat npm...

EUVD-2025-115048

Malicious code in configstore-publish-callback-atlas npm...

EUVD-2025-112838

Malicious code in hercules-ceres-jest-callback npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

EUVD-2025-115789

Malicious code in callback-shelljs-antares-pavo npm...

EUVD-2025-111934

Malicious code in kinetic-nestjs-callback-jovian npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-122579

Malicious code in rest-command-callback-command npm...

EUVD-2025-115792

Malicious code in callback-run-script-html-webpack-plugin-server npm...

EUVD-2025-121659

Malicious code in start-build-callback-axios npm...

EUVD-2025-116225

Malicious code in backend-andromeda-chakra-ui-callback npm...

EUVD-2025-111632

Malicious code in local-callback-miranda-venus npm...

EUVD-2025-112342

Malicious code in jabbah-callback-lacerta-wasat npm...

EUVD-2025-115063

Malicious code in configstore-callback-redis-gemini npm...

EUVD-2025-112093

Malicious code in juno-callback-pegasus-xanadu npm...

EUVD-2025-122906

Malicious code in radiant-mira-cypress-callback npm...

Malicious code in ignite-callback-node-config-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8894545ee7492ce0676852567fe5d3d6b2139f08799c38602766a6a8f7f91fb1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

Malicious code in callback-run-script-html-webpack-plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 281a3cc4cd04277d76318a794fe020a7ea9edc9d4d5148a26b7f40fcbf27f72a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...