EUVD-2025-115794

Malicious code in callback-restart-spawn-cordelia npm...

EUVD-2025-112838

Malicious code in hercules-ceres-jest-callback npm...

EUVD-2025-121537

Malicious code in supervisor-callback-xo-gridsome npm...

EUVD-2025-124848

Malicious code in mocha-chariklo-callback-pulsar npm...

EUVD-2025-115667

Malicious code in carpo-frontend-callback-gacrux npm...

Malicious code in callback-apollo-forever-html-webpack-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7996edf836737ab7f467291745cf1804def8903044963d1c9e7971d8f0e64cef This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123779

Malicious code in phoebe-callback-javascript-sequelize npm...

EUVD-2025-115672

Malicious code in carpo-centauri-commitlint-config-angular-callback npm...

EUVD-2025-120247

Malicious code in xenos-magellan-callback-dotenv npm...

EUVD-2025-121147

Malicious code in transport-commitlint-callback-andromeda npm...

EUVD-2025-113507

Malicious code in fornax-airbnb-callback-stream npm...

EUVD-2025-113386

Malicious code in fusion-callback-soap-markdownlint npm...

EUVD-2025-115021

Malicious code in convict-rehype-callback-npm npm...

EUVD-2025-115796

Malicious code in callback-request-server-node-config npm...

EUVD-2025-122579

Malicious code in rest-command-callback-command npm...

Malicious code in jabbah-callback-lacerta-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b83b3a3514c3342e03ae6ef7c003766fd44a1062721d488bf938e4f4a48224c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146142 Malicious code in phoebe-callback-javascript-sequelize (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 863b7bdace3d43c148c9ec83856b8f909c3780ed176684c3d48c0716917f78d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123902

Malicious code in pegasus-callback-build-sequelize npm...

EUVD-2025-114574

Malicious code in deneb-callback-terser-wasat npm...

MAL-2025-149132 Malicious code in version-callback-husky-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8176d823b539f44960e3f001e364010b73dbcdcb7449320d72a3472268eb79d7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...