EUVD-2025-179436

Malicious code in cypress-cosmiconfig-dotenv-safe-telesto npm...

Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678fcb16a0b7adb4817edb4b06bec8c2c550bf2f68a2e83f948eed4985d886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175430

Malicious code in zenith-cosmiconfig-miranda-standard npm...

EUVD-2025-178309

Malicious code in janus-greatfilter-cosmiconfig-ursa npm...

EUVD-2025-179552

Malicious code in cosmiconfig-gatsby-janus-slides npm...

EUVD-2025-179678

Malicious code in colors-gravity-cosmiconfig-zephyr npm...

EUVD-2025-177492

Malicious code in octans-non-blocking-repository-cosmiconfig npm...

EUVD-2025-175522

Malicious code in xanthus-cosmiconfig-nightwatch-eridanus npm...

EUVD-2025-177206

Malicious code in phoebe-sagitta-cosmiconfig-got npm...

EUVD-2025-176622

Malicious code in robotics-cosmiconfig-repository-metabolomics npm...

Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in server-nebula-cosmiconfig-umbra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6d990e48bbacd130f5620b5b20983fbbc4001f0ff552a7c6e169141a13af346c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in cosmiconfig-xml-rehype-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c337d51a5afe782ff83bde8f55685686a71e8d4b23d52af00c64f247b76db8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179551

Malicious code in cosmiconfig-perseus-redgiant-apollo npm...

EUVD-2025-179550

Malicious code in cosmiconfig-xml-rehype-webpack npm...

EUVD-2025-178794

Malicious code in galaxy-cosmology-remark-cosmiconfig npm...

EUVD-2025-180277

Malicious code in async-buffer-cosmiconfig-aquarius npm...

EUVD-2025-179069

Malicious code in eridanus-rigel-cosmiconfig-pino-pretty npm...

EUVD-2025-178389

Malicious code in inquirer-winston-commitlint-cosmiconfig npm...

Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...