EUVD-2025-115017

Malicious code in convict-superagent-leda-titan npm...

EUVD-2025-115040

Malicious code in convict-atlas-ophiuchus-prettier npm...

EUVD-2025-115035

Malicious code in convict-gemini-quark-command npm...

EUVD-2025-111540

Malicious code in luna-orbit-inquirer-convict npm...

EUVD-2025-115038

Malicious code in convict-cypress-lacerta-postcss npm...

EUVD-2025-115024

Malicious code in convict-pulsar-odin-pegasus npm...

Malicious code in grunt-bunyan-convict-forever (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cf0be9f17a0f8f2b3a4f62c63c7461b5adced413836aa1b4f216201de7a4d22a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112865

Malicious code in helmet-convict-mongoose-cz-conventional-changelog npm...

EUVD-2025-124807

Malicious code in module-nestjs-convict-configstore npm...

MAL-2025-141077 Malicious code in convict-jsonp-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e948925b47961d78429f6f8ac1d7b338bfdcf54557a2179edf315cc354e1fc4f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141086 Malicious code in convict-query-nodejs-prettier (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 947879ab9208e82054fd505807da031763a35a0ff420bdf7e46e98c33eec225d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115364

Malicious code in child-process-altair-convict-dynamo npm...

EUVD-2025-122120

Malicious code in selenium-hapi-graphql-convict npm...

EUVD-2025-123627

Malicious code in pm2-convict-lint-rimraf npm...

EUVD-2025-116145

Malicious code in bellatrix-spawn-iota-convict npm...

EUVD-2025-122546

Malicious code in restart-convict-juno-envconfig npm...

EUVD-2025-122404

Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict npm...

EUVD-2025-121362

Malicious code in test-convict-jsonp-carpo npm...

EUVD-2025-114569

Malicious code in deneb-convict-loopback-spica npm...

Malicious code in pm2-sync-convict-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1330108cc41fc5f8b16b97bd8b44613ea9687f6d108f9fb4aac46e264b7302b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...