Malicious code in orbit-markdown-pdf-octans-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a0641cc7aee43d97ec6273b6e03734f3d96d764db8cf8ace1375ac67e421705 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111827

Malicious code in leda-prettier-antd-convict npm...

EUVD-2025-113681

Malicious code in farout-yonder-convict-iota npm...

EUVD-2025-115051

Malicious code in configstore-markdown-convict-auth0 npm...

EUVD-2025-122777

Malicious code in regulus-electron-builder-toml-convict npm...

EUVD-2025-115364

Malicious code in child-process-altair-convict-dynamo npm...

EUVD-2025-121222

Malicious code in toml-convict-lyra-helios npm...

EUVD-2025-116885

Malicious code in adonis-sass-loader-eslint-config-convict npm...

EUVD-2025-122546

Malicious code in restart-convict-juno-envconfig npm...

EUVD-2025-114989

Malicious code in cors-equinox-convict-rollup-plugin npm...

EUVD-2025-116508

Malicious code in ariel-polaris-rimraf-convict npm...

EUVD-2025-114341

Malicious code in dotenv-safe-parcel-convict-umbriel npm...

EUVD-2025-115039

Malicious code in convict-cross-env-fornax-buffer npm...

EUVD-2025-115020

Malicious code in convict-relay-docusaurus-bootstrap npm...

EUVD-2025-115040

Malicious code in convict-atlas-ophiuchus-prettier npm...

EUVD-2025-115019

Malicious code in convict-rollup-plugin-buffer-sagitta npm...

EUVD-2025-113912

Malicious code in eslint-config-event-convict-zenith npm...

EUVD-2025-115699

Malicious code in carina-draco-install-convict npm...

MAL-2025-145111 Malicious code in module-nestjs-convict-configstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0597fa9a588ae3af2a54589c51cad71f570903d12c726485ea45874f01d571b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...