EUVD-2025-114479

Malicious code in development-rimraf-celeste-norma npm...

EUVD-2025-114478

Malicious code in development-sedna-webdriver-mocha-loglevel npm...

EUVD-2025-114472

Malicious code in development-ursa-upgrade-kaus npm...

EUVD-2025-114469

Malicious code in development-xo-pegasus-schema npm...

EUVD-2025-115615

Malicious code in castor-procyon-nova-development npm...

EUVD-2025-115387

Malicious code in charon-csv-development-equinox npm...

EUVD-2025-114481

Malicious code in development-query-pm2-uglify-js npm...

Malicious code in development-heka-fetch-deimos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2fc34f1ad0167ae7f5840b129cbff77369019cb49cf1497dfc4cd4c540ecfb8c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-116249

Malicious code in babel-development-jabbah-lacerta npm...

EUVD-2025-114490

Malicious code in development-dotenv-pyxis-ariel npm...

EUVD-2025-114493

Malicious code in development-chariklo-server-janus npm...

EUVD-2025-114361

Malicious code in dotenv-safe-development-command-non-blocking npm...

EUVD-2025-114471

Malicious code in development-version-schema-semantic-release npm...

EUVD-2025-122714

Malicious code in relay-relay-development-warp npm...

EUVD-2025-123065

Malicious code in puppeteer-pino-electron-builder-development npm...

EUVD-2025-113238

Malicious code in geckodriver-miranda-development-colors npm...

EUVD-2025-124053

Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development npm...

MAL-2025-143314 Malicious code in hermes-development-browserify-framework (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 603d2d8cb661d4bfb2a2f0cae3ab47d384a2ec9b7bd2980e68a0ee846b0d175c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141619 Malicious code in development-dotenv-pyxis-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ae211171bc2d9b5f0fe3cc61c3f814bb976c29080a1cef7a633af982f93147be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141748 Malicious code in dotenv-safe-development-command-non-blocking (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16cfd842e8cb52469e8ea8f152f3e7626745060a732985a6a98d9c59f8271 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...