EUVD-2025-121068

Malicious code in typeorm-typeorm-development-apollo npm...

EUVD-2025-120838

Malicious code in vega-io-prettier-stylelint-development npm...

EUVD-2025-122005

Malicious code in shelljs-library-development-commitlint npm...

EUVD-2025-121461

Malicious code in taurus-development-sirius-pegasus npm...

EUVD-2025-121281

Malicious code in thuban-development-carpo-loglevel npm...

EUVD-2025-123586

Malicious code in polaris-development-subscription-eridanus npm...

EUVD-2025-123521

Malicious code in postcss-loader-mini-css-extract-plugin-development-heka npm...

EUVD-2025-124096

Malicious code in ophiuchus-kinetic-development-ursa npm...

EUVD-2025-124053

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...

EUVD-2025-124027

Malicious code in ora-react-bootstrap-development-cressida npm...

EUVD-2025-113900

Malicious code in eslint-config-socketio-development-event npm...

Malicious code in gatsby-vuetify-development-wasat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 115d3938de17f161d1328e3a01824c8b612e47fb942519a31d5f247322903bca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-114474

Malicious code in development-taurus-slidev-deneb npm...

EUVD-2025-122693

Malicious code in release-it-optimize-css-assets-webpack-plugin-nextjs-development npm...

EUVD-2025-120789

Malicious code in version-mdx-development-delphinus npm...

EUVD-2025-114116

Malicious code in eleventy-development-tailwindcss-aether npm...

EUVD-2025-114482

Malicious code in development-polaris-lint-staged-procyon npm...

EUVD-2025-114477

Malicious code in development-server-electron-builder-hermes npm...

EUVD-2025-124461

Malicious code in nightwatch-cosmiconfig-semantic-ui-development npm...

MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...