EUVD-2025-120646

Malicious code in wasat-cli-barnard-style-loader npm...

Malicious code in rollup-spectron-acamar-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af8656fd896287bd8c9d143d4a1422fefe39929d2ccb75fa57c25ba1c57a304b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122389

Malicious code in rollup-spectron-acamar-cli npm...

EUVD-2025-115306

Malicious code in cli-lynx-nova-element-ui npm...

EUVD-2025-112614

Malicious code in hyperion-scorpius-xerxes-cli npm...

EUVD-2025-115299

Malicious code in cli-rimraf-callback-exec npm...

EUVD-2025-115316

Malicious code in cli-dactyl-restart-meteor npm...

EUVD-2025-124391

Malicious code in node-sass-cli-charon-zenith npm...

EUVD-2025-115298

Malicious code in cli-sedna-xo-tool npm...

EUVD-2025-115315

Malicious code in cli-dagda-heka-config npm...

EUVD-2025-114007

Malicious code in epimetheus-pipe-janus-cli npm...

EUVD-2025-124381

Malicious code in node-sass-gacrux-venus-cli npm...

EUVD-2025-115321

Malicious code in cli-browserify-mini-css-extract-plugin-frontend npm...

Malicious code in colors-corvus-postgres-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2eb7eafb397099447d7894757e36ecfbe2dfe1fc171de2c28d818bd4b75bfaa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-123864

Malicious code in pegasus-superagent-await-cli npm...

EUVD-2025-115301

Malicious code in cli-passport-iota-corvus npm...

EUVD-2025-113250

Malicious code in geckodriver-css-loader-transform-cli npm...

Malicious code in playwright-cli-antares-lynx (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 62941a3085c080ce17c8f0e51fd2b6b90ebbdbb7d4177709b5c4bdf44692b987 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149894 Malicious code in zephyr-resolvers-cli-concurrently (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c010e7aa179a021023ded32a1531ca34e4cd286c20d4e8b50aca8afa148a3ced This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146184 Malicious code in phoebe-style-loader-cli-jupiter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93e04ce2c712bbc25c67643867a15140421117b4114f9341aa70a921105a3617 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...