EUVD-2025-113497

Malicious code in fornax-csrf-buffer-remark npm...

EUVD-2025-112916

Malicious code in hapi-prompts-markdown-pdf-csrf npm...

EUVD-2025-116405

Malicious code in aurora-chai-csrf-mocha npm...

EUVD-2025-111710

Malicious code in link-csrf-cressida-achernar npm...

EUVD-2025-114822

Malicious code in csrf-izar-resolvers-nightmare npm...

EUVD-2025-122721

Malicious code in relay-jsonp-jsonp-csrf npm...

EUVD-2025-114820

Malicious code in csrf-meissa-nodemon-neptune npm...

EUVD-2025-122858

Malicious code in react-bootstrap-loopback-acamar-csrf npm...

EUVD-2025-113185

Malicious code in global-csrf-xml-package npm...

EUVD-2025-120229

Malicious code in xerxes-csrf-quasar-tailwindcss npm...

Malicious code in csrf-process-janus-package (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffbfe931a8e51ce2cf27b87751a2a29dae84389abf262cde9b1af1587c6307b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114164

Malicious code in elektra-fornax-csrf-csv npm...

MAL-2025-141298 Malicious code in csrf-uglify-js-library-procyon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 730441ab41ce6ed25d199d9cf8667d5b13854fe7ba17aff009f8dd4285a71b13 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114825

Malicious code in csrf-gulp-standard-commitlint npm...

MAL-2025-145001 Malicious code in mira-andromeda-csrf-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 205dbb23936230601580aec44ec7ecae172b933acc677bca41f2c589c796f577 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148590 Malicious code in testcafe-csrf-lacerta-global (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ef0c9fe738e4d61c04e2ec74182208a69330dcac9da00526c270c09930a40f8b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146333 Malicious code in polaris-csrf-solis-xanthus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ba790998ac2224443eb8c2227985b455aa02d7be390597fec0d0f74cb3527b62 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114811

Malicious code in csrf-uglify-js-library-procyon npm...

EUVD-2025-121907

Malicious code in soap-csrf-sync-nextjs npm...

Malicious code in elara-centauri-csrf-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10971ec1a6733e379704351180a293b3f5699ba9e8531303ce8229853c62bc2c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...