EUVD-2025-122072

Malicious code in semantic-ui-leda-dependencies-rate-limiter npm...

Malicious code in dependencies-local-lint-spinner (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1252175578f0b4e994a71fcbd5f3ba442903b902ccc88eef60da0b74d7c8b434 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-124245

Malicious code in npm-dependencies-cypress-protractor npm...

EUVD-2025-111848

Malicious code in leda-dependencies-fomalhaut-rocket npm...

EUVD-2025-112726

Malicious code in hugo-dependencies-quantum-janus npm...

EUVD-2025-120822

Malicious code in venus-dependencies-ceres-yonder npm...

EUVD-2025-116534

Malicious code in arcturus-dependencies-transport-child-process npm...

Malicious code in hyperion-dependencies-query-castor (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f9ca77bdda7e3f73d12994e66143ef811ef1b2758f557d51470f9ed1acaaa65 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-122265

Malicious code in sails-terser-bulma-dependencies npm...

EUVD-2025-114531

Malicious code in dependencies-radiant-centaurus-lyra npm...

EUVD-2025-120783

Malicious code in version-transport-vuepress-dependencies npm...

Malicious code in dependencies-rimraf-local-gatsby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 054b2d956edf01f7319f62c077101349cd5044afb5c88bc418ae0072e0c3a095 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114526

Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin npm...

EUVD-2025-114816

Malicious code in csrf-postcss-dependencies-upgrade npm...

EUVD-2025-114373

Malicious code in dotenv-parse-variables-rehype-webpack-dependencies npm...

MAL-2025-141567 Malicious code in dependencies-equinox-despina-eclipse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39c683b2a7d937899f8905e90cc2f46225ee2a5764154d6b399d88a67ce7d677 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141569 Malicious code in dependencies-hugo-phenomic-node-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0454cd7bff21becd48b42a36bec52d878743b10e639c0ddff5cea08ea8574357 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dependencies-lyra-forever-heka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d8637e6125cafd55c9981aedd548b7e3f429b8fd732f4c1c4d35447b66db76ab This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114539

Malicious code in dependencies-install-xenon-venus npm...

MAL-2025-141580 Malicious code in dependencies-restart-luna-regulus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ac412bcd002439620e10259ac8707098741bbfe9441a469fef66f325e20ee8e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...