EUVD-2025-121383

Malicious code in terser-webpack-plugin-csv-transform-native npm...

EUVD-2025-111297

Malicious code in meissa-nightwatch-csv-publish npm...

EUVD-2025-122999

Malicious code in quark-csv-draco-procyon npm...

EUVD-2025-114761

Malicious code in csv-nashira-scorpius-indus npm...

EUVD-2025-114758

Malicious code in csv-nova-eridanus-neptune npm...

EUVD-2025-120182

Malicious code in xo-hermes-csv-jekyll npm...

EUVD-2025-112931

Malicious code in hapi-csv-zenobia-xanadu npm...

EUVD-2025-123412

Malicious code in prettier-stylelint-miranda-rollup-plugin-csv npm...

EUVD-2025-113155

Malicious code in google-csv-bellatrix-chariklo npm...

Malicious code in csv-europa-bellatrix-janus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af2dc13883e16aec9a6ab1832ce255e0fd16cb43a6a61cec25ce2388c426afcd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-111965

Malicious code in kaus-local-readable-csv npm...

Malicious code in commitlint-csv-auth-oberon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f38ec831b063c5df584e2cbbebb9f222f1a0f88cf465297439c89873f5634853 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nashira-scorpius-indus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 68a3b7aa9fe5d60a0abd4a937eb0407d231dd677987f6edf41565d138dfb317d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nestjs-mdx-link (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69ce2ad2c09a45b1508ca38300e78b59601e949727f7b0648dca843a9241e626 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-nova-eridanus-neptune (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5abf3de98dfec792077b0333e20a8ce8bf28b2841ac4e64efc61058dbde691c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in csv-ultra-wezen-astro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1858d3c966b6f580575064487e3a89444dbbd196a7324183c8b834a2b42ec59c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fork-csv-standard-async (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 207804b34c80b70376e5579f1c9e4b7c425db63c480b78e030d71008f1416272 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fornax-mdx-antares-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bc2e57ea17da85eaf0b5d0af0cc4aea98bb7840071c4378fe534257b87dfed This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ganymede-xenon-public-csv (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 22712844b046b055495c9f267eb2ca2d0528d3206da37d3cccb5acb32f064412 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in geckodriver-magellan-csv-duplex (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dcb5295e48d36097f3e9d17b0d1580795374421d507e8f84f0bc5acb818b7ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...