EUVD-2025-176347

Malicious code in slides-convict-husky-kaus npm...

EUVD-2025-177113

Malicious code in polaris-interferometry-sails-convict npm...

MAL-2025-186295 Malicious code in convict-axios-cosmogenic-miranda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 699479996c8d027d40da1208f7afdeaf9a940ada10a45ce700f370a485dd9203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178117

Malicious code in levels-convict-json-dynamo npm...

EUVD-2025-178162

Malicious code in lacerta-paleobotany-convict-babel npm...

Malicious code in convict-spawn-gravitationalwave-stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 128d86882e0076d80ab9827d708aa6534aa225eee0e3afeb4af5dcf612c62f79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187575 Malicious code in janus-mysql-delphinus-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e647b81dbfd5ee7655c95b369e7c6378d99b0066cc26cbd55fee232abdd2e521 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186298 Malicious code in convict-quantum-hermes-enif (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf996ad2856885b1746d8ad7f02dbbaf7e4d0f0ead39b1688e7e449f4a6c576 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186411 Malicious code in csrf-mutation-oauth-convict (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b3d31dcca040505ffbe98cbfdc62ec4c56c09a19695b316b97d62cbc7f6254a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-178765

Malicious code in ganymede-webdriver-manager-convict-equinox npm...

EUVD-2025-115029

Malicious code in convict-mocha-castor-proxima npm...

EUVD-2025-114396

Malicious code in dotenv-parse-variables-convict-fusion-vuepress npm...

EUVD-2025-123921

Malicious code in pavo-less-loader-convict-uglify-js npm...

EUVD-2025-122701

Malicious code in release-it-convict-io-framework npm...

EUVD-2025-112865

Malicious code in helmet-convict-mongoose-cz-conventional-changelog npm...

EUVD-2025-115031

Malicious code in convict-loopback-ganymede-meissa npm...

EUVD-2025-122929

Malicious code in quito-flare-convict-thuban npm...

EUVD-2025-114614

Malicious code in deimos-gulp-convict-rimraf npm...

EUVD-2025-123336

Malicious code in procyon-docusaurus-leda-convict npm...

EUVD-2025-116508

Malicious code in ariel-polaris-rimraf-convict npm...