EUVD-2025-120324

Malicious code in xanadu-repository-csv-venus npm...

Malicious code in tethys-mira-csv-impulse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c92e07edfec104f27c0d5def85f67861f7dd01686a1fd7615be4a2fb1db864c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115387

Malicious code in charon-csv-development-equinox npm...

MAL-2025-144818 Malicious code in meissa-nightwatch-csv-publish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbf16775a922ff209eef6415af4c39eccd0f1777820ea77c8cb9fcd70f4c9295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114117

Malicious code in eleventy-csv-envconfig-sagitta npm...

EUVD-2025-115132

Malicious code in commitlint-csv-auth-oberon npm...

EUVD-2025-123786

Malicious code in phenomic-javascript-remark-csv npm...

EUVD-2025-114767

Malicious code in csv-changelog-dagda-rimraf npm...

EUVD-2025-114754

Malicious code in csv-quantum-gemini-meteor npm...

EUVD-2025-114749

Malicious code in csv-test-subscription-nebula npm...

EUVD-2025-122012

Malicious code in shelljs-csv-antares-changelog npm...

EUVD-2025-111525

Malicious code in lynx-csv-bunyan-repository npm...

Malicious code in fornax-mdx-antares-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc2e57ea17da85eaf0b5d0af0cc4aea98bb7840071c4378fe534257b87dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-112931

Malicious code in hapi-csv-zenobia-xanadu npm...

Malicious code in eris-miranda-csv-halley (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08de3a8d81298ce8a508487d4353acf11b5e3fed26f67cac0a62919a1ba1851b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114753

Malicious code in csv-rollup-dotenv-yonder npm...

EUVD-2025-114763

Malicious code in csv-luna-loglevel-buffer npm...

EUVD-2025-120920

Malicious code in upgrade-csv-gulp-browserify npm...

EUVD-2025-113862

Malicious code in eslint-soap-csv-commitizen npm...

EUVD-2025-115180

Malicious code in commitizen-csv-impulse-wasat npm...