EUVD-2025-116198

Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular npm...

EUVD-2025-114531

Malicious code in dependencies-radiant-centaurus-lyra npm...

EUVD-2025-116695

Malicious code in antares-epimetheus-chromedriver-dependencies npm...

EUVD-2025-115402

Malicious code in chariklo-mongoose-dependencies-astro npm...

EUVD-2025-122072

Malicious code in semantic-ui-leda-dependencies-rate-limiter npm...

EUVD-2025-114537

Malicious code in dependencies-lacerta-hermes-install npm...

Malicious code in geckodriver-dependencies-ursa-thuban (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 747f5a78aa88b271647ec42d1c0e8110c547dda2c176ce3acd506e7f4aae8be8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122806

Malicious code in redis-version-dependencies-zephyr npm...

EUVD-2025-113439

Malicious code in foundation-sync-jwt-dependencies npm...

Malicious code in dependencies-lyra-forever-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8637e6125cafd55c9981aedd548b7e3f429b8fd732f4c1c4d35447b66db76ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114543

Malicious code in dependencies-envconfig-bootes-postgres npm...

MAL-2025-141572 Malicious code in dependencies-lacerta-hermes-install (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 678c3892029c1b658f28fa5b4cc927adeb359d890e770612dd77011a83b270f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-143590 Malicious code in ini-event-dependencies-umbriel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5a9c7cfb7f15ef248aaaa8a66266a84dee824fef7044f5a9e9c85acff1ab1726 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116337

Malicious code in avior-dependencies-radiant-eridanus npm...

EUVD-2025-114546

Malicious code in dependencies-changelog-cosmiconfig-colors npm...

EUVD-2025-114816

Malicious code in csrf-postcss-dependencies-upgrade npm...

EUVD-2025-114522

Malicious code in dependencies-upgrade-request-celeste npm...

MAL-2025-141569 Malicious code in dependencies-hugo-phenomic-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...