EUVD-2025-179263

Malicious code in dotenv-parse-variables-public-cosmiconfig-zenobia npm...

EUVD-2025-175430

Malicious code in zenith-cosmiconfig-miranda-standard npm...

EUVD-2025-179678

Malicious code in colors-gravity-cosmiconfig-zephyr npm...

EUVD-2025-179069

Malicious code in eridanus-rigel-cosmiconfig-pino-pretty npm...

Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175602

Malicious code in webdriver-mocha-nightwatch-cosmiconfig-despina npm...

EUVD-2025-176622

Malicious code in robotics-cosmiconfig-repository-metabolomics npm...

Malicious code in cosmiconfig-xml-rehype-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c337d51a5afe782ff83bde8f55685686a71e8d4b23d52af00c64f247b76db8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179969

Malicious code in browserify-cosmiconfig-testcafe-await npm...

EUVD-2025-179553

Malicious code in cosmiconfig-fermiparadox-parsec-forever npm...

EUVD-2025-180277

Malicious code in async-buffer-cosmiconfig-aquarius npm...

Malicious code in janus-greatfilter-cosmiconfig-ursa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4678fcb16a0b7adb4817edb4b06bec8c2c550bf2f68a2e83f948eed4985d886a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-175522

Malicious code in xanthus-cosmiconfig-nightwatch-eridanus npm...

EUVD-2025-178389

Malicious code in inquirer-winston-commitlint-cosmiconfig npm...

EUVD-2025-177206

Malicious code in phoebe-sagitta-cosmiconfig-got npm...

Malicious code in phoebe-sagitta-cosmiconfig-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0e13ea76237699131190626c9abb30663026fbd8636c42b98e42d5707324a7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-179554

Malicious code in cosmiconfig-deimos-kaus-hyperion npm...

EUVD-2025-179551

Malicious code in cosmiconfig-perseus-redgiant-apollo npm...

MAL-2025-186330 Malicious code in cosmiconfig-gatsby-janus-slides (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d569a94adf638e19a24f0f06a1a6a865fbf7a01e48a5109520fe71f210a2307f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-188294 Malicious code in nightwatch-sedna-cosmiconfig-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f21f21d6be4c66b2ee15a78032e53be0a3ad159b0664bd39e8ecc869b9267f47 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...